From: Ondřej Surý <ondrej@sury.org>
Date: Wed, 6 Jun 2018 13:14:42 +0000 (+0200)
Subject: Add note about removing DSA and DSA-NSEC3-SHA1 to release notes
X-Git-Tag: v9.13.4~123^2~1
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=31b8b37e8f6ecb94a16d36bf2cba6550ef3c211e;p=thirdparty%2Fbind9.git

Add note about removing DSA and DSA-NSEC3-SHA1 to release notes
---

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 15d3a566096..29839b35cf4 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -373,6 +373,11 @@
 	  usually long after their end-of-life date and they are
 	  neither developed nor supported by their respective vendors.
 	</para>
+	<para>
+	  Support for DSA and DSA-NSEC3-SHA1 algorithms has been
+	  removed from BIND as the DSA key length is limited to 1024
+	  bits and this is not considered secure enough.
+	</para>
       </listitem>
     </itemizedlist>
   </section>