From 33a03d15e5bf925c6298af751be6ce613f664830 Mon Sep 17 00:00:00 2001 From: des Date: Fri, 13 Sep 2013 10:37:24 +0000 Subject: Note about the OpenSSH change. Approved by: re (gjb) --- UPDATING | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'UPDATING') diff --git a/UPDATING b/UPDATING index ae92e96..887f869 100644 --- a/UPDATING +++ b/UPDATING @@ -31,6 +31,12 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 10.x IS SLOW: disable the most expensive debugging functionality run "ln -s 'abort:false,junk:false' /etc/malloc.conf".) +20130911: + OpenSSH is now built with DNSSEC support, and will by default + silently trust signed SSHFP records. This can be controlled with + the VerifyHostKeyDNS client configuration setting. DNSSEC support + can be disabled entirely with the WITHOUT_LDNS option in src.conf. + 20130906: The GNU Compiler Collection and C++ standard library (libstdc++) are no longer built by default on platforms where clang is the system -- cgit v1.1