commit 8e8b2d6f63cada12d85109bfc847b53ec25a4875
author Simon Kelley <simon@thekelleys.org.uk> Mon Oct 30 23:21:52 2017 +0000
committer Simon Kelley <simon@thekelleys.org.uk> Mon Oct 30 23:21:52 2017 +0000
tree ad49af8129d2e66ceada8adc5f667a7951990a8c
parent 087eb76140725f8f1892ba6f251ea052d3440966

Release notes update.

CHANGELOG

diff --git a/CHANGELOG b/CHANGELOG
index fe8df02..e435fc8 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -10,6 +10,12 @@
 	recusion desired bit set, UNLESS acting as a authoritative
 	DNS server. This avoids a potential route to cache snooping.
 
+	Add support for Ed25519 signatures in DNSSEC validation.
+
+	No longer support RSA/MD5 signatures in DNSSEC validation,
+	since these are not secure. This behaviour is mandated in
+	RFC-6944.
+
 
 version 2.78
         Fix logic of appending ".<layer>" to PXE basename. Thanks to Chris