CHANGES and release note for [GL #3953]

(cherry picked from commit 8d80ee561ed087d3376919cd9239a53c46970995)

diff --git a/CHANGES b/CHANGES
index 2770543be58f0bce121d54951f4929059bcbb2d0..75cda85117745827ea08492945c783e26ada9084 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6126.  [cleanup]       Deprecate zone type "delegation-only" and the
+                       "delegation-only" and "root-delegation-only"
+                       options. [GL #3953]
+
 6125.  [bug]           Hold a catz reference while the update process is
                        running, so that the catalog zone is not destroyed
                        during shutdown until the update process is finished or

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 7267ffdd5d990277c519f7f930dd25b474a1567d..6a63c5316706699a7f83b067a626844f6b3cdbc2 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -27,6 +27,16 @@ Removed Features
 
 - None.
 
+- Zone type ``delegation-only``, and the ``delegation-only`` and
+  ``root-delegation-only`` options, have been deprecated; a warning will
+  be logged when they are used.
+
+  These options were created to address the SiteFinder controversy, in
+  which certain top-level domains redirected misspelled queries to other
+  sites instead of returning NXDOMAIN responses. Since top-level domains are
+  now DNSSEC signed, and DNSSEC validation is active by default, the
+  options are no longer needed. :gl:`#3953`
+
 Feature Changes
 ~~~~~~~~~~~~~~~