From owner-freebsd-stable@FreeBSD.ORG  Tue Jul 30 14:29:29 2013
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTP id E810BC19
 for <freebsd-stable@freebsd.org>; Tue, 30 Jul 2013 14:29:29 +0000 (UTC)
 (envelope-from trashcan@odo.in-berlin.de)
Received: from mx1.enfer-du-nord.net (mx1.enfer-du-nord.net [91.121.60.26])
 (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id A8CA22779
 for <freebsd-stable@freebsd.org>; Tue, 30 Jul 2013 14:29:29 +0000 (UTC)
Received: from mx1.enfer-du-nord.net (mail.kaan-bock.invalid [10.10.10.1])
 by mx1.enfer-du-nord.net (Postfix) with ESMTP id 3c4KsG2SN7zDkR
 for <freebsd-stable@freebsd.org>; Tue, 30 Jul 2013 16:29:22 +0200 (CEST)
X-Virus-Scanned: amavisd-new at enfer-du-nord.net
Received: from mx1.enfer-du-nord.net ([10.10.10.1])
 by mx1.enfer-du-nord.net (mx1.enfer-du-nord.net [10.10.10.1]) (amavisd-new,
 port 10024)
 with LMTP id p39dv_2sSdAR for <freebsd-stable@freebsd.org>;
 Tue, 30 Jul 2013 16:29:22 +0200 (CEST)
Received: from mx1.enfer-du-nord.net (www.kaan-bock.invalid [10.10.10.2])
 by mx1.enfer-du-nord.net (Postfix) with ESMTP id 3c4KsF6xFtzDkH
 for <freebsd-stable@freebsd.org>; Tue, 30 Jul 2013 16:29:21 +0200 (CEST)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8;
 format=flowed
Content-Transfer-Encoding: 7bit
Date: Tue, 30 Jul 2013 16:29:21 +0200
From: Michael Grimm <trashcan@odo.in-berlin.de>
To: freebsd-stable@freebsd.org
Subject: Re: Bind in FreeBSD, security advisories
In-Reply-To: <1375193086.25610.3260371.08421FD0@webmail.messagingengine.com>
References: <CAO+PfDctepQY0mGH7H+gOSm4HJwhe-RCND+mxAArnRxpWiCsjg@mail.gmail.com>
 <1375186900.23467.3223791.24CB348A@webmail.messagingengine.com>
 <51F7B5C7.6050008@digsys.bg>
 <CAOgwaMt4G02yhU0cbiq_EEwhi4=mgt2kLGJf0Rgb8t9wECsGJA@mail.gmail.com>
 <51F7C07C.9060606@digsys.bg>
 <1375193086.25610.3260371.08421FD0@webmail.messagingengine.com>
Message-ID: <7cc4b6841ce070bef40ed28780ae00d6@mx1.enfer-du-nord.net>
X-Sender: trashcan@odo.in-berlin.de
User-Agent: Roundcube Webmail/0.9.2
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 30 Jul 2013 14:29:30 -0000

On 2013-07-30 16:04, Mark Felder wrote:

> Unbound/NSD are suitable replacements if we really need something in
> base, and they have been picked up by OpenBSD for a good reason --
> clean, secure, readable, maintainable codebases and their use across 
> the
> internet and on the ROOT servers is growing.

+1

I switched two years ago and disabled bind in /etc/src.conf. Thus, I 
could
skip some followup-work regarding SAs in the past multiplied by the 
number
of servers involved.

Regards,
Michael