MIME-Version: 1.0
In-Reply-To: <rt-4.2.8-34950-1461887060-145.0-0-0@isc.org>
Content-Type: text/plain; charset="utf-8"
X-Mailer: MIME-tools 5.508 (Entity 5.508)
Content-Transfer-Encoding: binary
X-RT-Original-Encoding: utf-8
References: <rt-4.2.8-34950-1461887060-145.0-0-0@isc.org>
 <RT-Ticket-42272@isc.org>
Content-Disposition: inline
Message-ID: <rt-4.4.1-31452-1508884464-857.42272-0-0@isc.org>
X-RT-Interface: Web
RT-Send-CC:
Content-Length: 791

4783.   [func]          The hmac-md5 algorithm is no longer recommended for
                        use with RNDC keys. For compatibility reasons, it
                        it is still the default algorithm in rndc-confgen,
                        but this will be changed to hmac-sha256 in a future
                        release. [RT #42272]

4782.   [func]          The use of dnssec-keygen to generate HMAC keys is
                        deprecated in favor of tsig-keygen.  dnssec-keygen
                        will print a warning when used for this purpose.
                        All HMAC algorithms will be removed from
                        dnssec-keygen in a future release. [RT #42272]

9.12.0

Leaving the ticket open; tomorrow we'll decide whether to change the default.