From: Patryk Szczygłowski <patryk@patryk.net>
Date: Wed, 1 Feb 2017 19:30:16 +0000 (+0100)
Subject: DNSSEC Look-aside Validation Registry has been deprecated. Decommissioning planned... 
X-Git-Tag: auto/th/bind-9.11.0.P3-1~1
X-Git-Url: http://git.pld-linux.org/?a=commitdiff_plain;h=f4624d10c3e0c008ae4713177893c28b142e25d4;p=packages%2Fbind.git

DNSSEC Look-aside Validation Registry has been deprecated. Decommissioning planned in Q1, 2017.
Remove config option to use DLV.
- https://www.isc.org/blogs/dlv/
- https://www.isc.org/downloads/bind/dlv/
---

diff --git a/bind-named.conf b/bind-named.conf
index ed68a27..83e3783 100644
--- a/bind-named.conf
+++ b/bind-named.conf
@@ -12,7 +12,6 @@ options {
 
 	#dnssec-enable yes;      # enable DNSSEC, default yes
 	dnssec-validation auto;  # enable DNSSEC validation with the key from bind.keys
-	dnssec-lookaside auto;   # enable DNSSEC DLV registry check with the key from bind.keys
 };
 
 zone "localhost" IN {