From owner-freebsd-stable@FreeBSD.ORG Sat Dec 18 17:16:29 2010 Return-Path: Delivered-To: stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 41A7F106564A; Sat, 18 Dec 2010 17:16:29 +0000 (UTC) (envelope-from wollman@hergotha.csail.mit.edu) Received: from hergotha.csail.mit.edu (wollman-1-pt.tunnel.tserv4.nyc4.ipv6.he.net [IPv6:2001:470:1f06:ccb::2]) by mx1.freebsd.org (Postfix) with ESMTP id ED3818FC08; Sat, 18 Dec 2010 17:16:28 +0000 (UTC) Received: from hergotha.csail.mit.edu (localhost [127.0.0.1]) by hergotha.csail.mit.edu (8.14.4/8.14.4) with ESMTP id oBIHGSW8099732; Sat, 18 Dec 2010 12:16:28 -0500 (EST) (envelope-from wollman@hergotha.csail.mit.edu) Received: (from wollman@localhost) by hergotha.csail.mit.edu (8.14.4/8.14.4/Submit) id oBIHGS3m099731; Sat, 18 Dec 2010 12:16:28 -0500 (EST) (envelope-from wollman) Date: Sat, 18 Dec 2010 12:16:28 -0500 (EST) From: Garrett Wollman Message-Id: <201012181716.oBIHGS3m099731@hergotha.csail.mit.edu> To: dougb@freebsd.org In-Reply-To: <4D0C49A2.4000203@FreeBSD.org> Organization: none X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.6 (hergotha.csail.mit.edu [127.0.0.1]); Sat, 18 Dec 2010 12:16:28 -0500 (EST) X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED autolearn=disabled version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on hergotha.csail.mit.edu Cc: stable@freebsd.org Subject: Re: RFC: Upgrade BIND version in RELENG_7 to BIND 9.6.x X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Dec 2010 17:16:29 -0000 In article <4D0C49A2.4000203@FreeBSD.org>, dougb@freebsd.org writes: >In order to avoid repeating the scenario where we have a version of BIND >in the base that is not supported by the vendor I am proposing that we >upgrade to BIND 9.6-ESV in FreeBSD RELENG_7. +1 All users are going to want working DNSsec soon, if they don't already, and that requires 9.6. (In fact, we should start shipping with DNSsec enabled by default and the root key pre-configured, if we aren't already doing so.) -GAWollman -- Garrett A. Wollman | What intellectual phenomenon can be older, or more oft wollman@bimajority.org| repeated, than the story of a large research program Opinions not shared by| that impaled itself upon a false central assumption my employers. | accepted by all practitioners? - S.J. Gould, 1993