From: Mark Andrews <marka@isc.org>
Date: Wed, 31 Jul 2019 07:03:37 +0000 (+1000)
Subject: add CHANGES
X-Git-Tag: v9.11.10~8^2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=d83241a3b344925bbe2db75279bbbb3442f69b27;p=thirdparty%2Fbind9.git

add CHANGES

(cherry picked from commit ac28cc14e12b4a4c02f45176437bc53a3c38ac90)
---

diff --git a/CHANGES b/CHANGES
index bb6dc45c69f..40fcab190f9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5275.	[bug]		Mark DS records included in referral messages
+			with trust level "pending" so that they can be
+			validated and cached immediately, with no need to
+			re-query. [GL #964]
+
 5273.	[bug]		Check that bits [64..71] of a dns64 prefix are zero.
 			[GL #1159]
 
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 02f9363b14f..4297a89e6f3 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -124,6 +124,13 @@
 	  algorithm and same Server Secret for the best performance.
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  DS records included in DNS referral messages can now be validated
+	  and cached immediately, reducing the number of queries needed for
+	  a DNSSEC validation. [GL #964]
+	</para>
+      </listitem>
     </itemizedlist>
   </section>