added warning about pseudorandom key material

This commit is contained in:
Andreas Gustafsson
2000-05-22 18:39:58 +00:00
parent a228ba1fa4
commit c5b7873fd2

11
README
View File

@@ -103,10 +103,17 @@ BIND 9.0.0b3
Bug fixes. Most bugs reported against beta 2 have been
fixed.
Known bugs:
There are still some known bugs, including:
The random data used in generating DNSSEC keys and
signatures contains a significant pseudorandom
component and is therefore not cryptographically
strong. We do not recommend the use of keys generated
by the key generation tools in this distribution
in production.
The option "query-source * port 53;" will not work as
expected. Instead of the wildcard address "*", you need
expected. Instead of the wildcard address "*", you need
to use an explicit source IP address.
For a detailed list of user-visible changes since beta 2, see