Re: Bind4/IPv6/DNSSEC support

Um, i've never heard that BIND 4 could do IPv6, but maybe i just missed 
that one. ISC's web site insinuates that BIND 9 is the first version of 
BIND that can do IPv6 and DNSSEC. I've never heard anything to the 
contrary. Not even the O'Reilly book on DNS & BIND mentions DNSSEC or 
IPv6 until the advent of BIND 9. Besides that, BIND 4 is not being 
developed, and IPv6 is still young. Especially the DNS part of IPv6 is 
not set in stone. I realize that OpenBSD still ships with BIND 4 because 
it has been thoroughly audited by the OpenBSD team, but i still wouldn't 
think about using anything but BIND 9. Only my personal opinion.

			-&


Virginie wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> 
> Hi all,
> 
> Bind4 is known to be IPv6 ready since release 4.9.5. So I tried to
> understand how to deal with but I didn't find any documentation on this
> topic, except a very very old "IPv6" draft written by Paul Vixie in 1996
> and still available in recent system sources (OpenBSD 3.1 ->
> /usr/src/usr.sbin/named/doc/misc/ipv6) as the unique bind4-IPv6
> documentation on the system.
> 
> Nothing more in the named man nor in the OpenBSD FAQ. Same thing
> regarding DNSSEC : I didn't even find if bind4 was now supporting DNSSEC,
> and the DNSSEC website and mailing-lists just speak about Bind4 as a
> "deprecated" DNS... 
> 
> I've an heavy confidence in OpenBSD developpers choices, so I would
> clearly prefer to keep Bind4 instead of installing Bind9, but I need to
> know if IPv6 support is just a legend or not, and if DNSSEC support
> exists or may exist. Optionally I would enjoy some precisions on the
> related options :-) (like the Bind9 listen-to-v6 for example). Any
> indication is welcome. 
> 
> Thanks per advance,
> 
> Virginie
> 
> - -- 
> [email protected] 
> question = ( to ) ? be : ! be;
>                 -- Wm. Shakespeare
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> 
> iD8DBQE984kA5238enIZtU4RAtvnAJ9XJJwqSlDE+xap4Y6fyP3N5o0W1ACfUBWq
> JFwyII+13K455/54TNp3inw=
> =9fAC
> -----END PGP SIGNATURE-----
> 


-- 
GPG key / Schlüssel -- http://simultan.dyndns.org/~arjones/gpgkey.txt
Encrypt everything. / Alles verschlüsseln.