From owner-freebsd-arch Wed Feb 6 7:31: 6 2002 Delivered-To: freebsd-arch@freebsd.org Received: from zibbi.icomtek.csir.co.za (zibbi.icomtek.csir.co.za [146.64.24.58]) by hub.freebsd.org (Postfix) with ESMTP id E1A9537B422; Wed, 6 Feb 2002 07:30:55 -0800 (PST) Received: (from jhay@localhost) by zibbi.icomtek.csir.co.za (8.11.6/8.11.6) id g16FUq970877; Wed, 6 Feb 2002 17:30:52 +0200 (SAT) (envelope-from jhay) From: John Hay Message-Id: <200202061530.g16FUq970877@zibbi.icomtek.csir.co.za> Subject: Re: cvs commit: src/contrib/bind FREEBSD-Xlist In-Reply-To: <20020206152311.GB66083@madman.nectar.cc> from "Jacques A. Vidrine" at "Feb 6, 2002 09:23:11 am" To: nectar@freebsd.org (Jacques A. Vidrine) Date: Wed, 6 Feb 2002 17:30:52 +0200 (SAT) Cc: freebsd-arch@freebsd.org X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > On Wed, Feb 06, 2002 at 05:14:03PM +0200, John Hay wrote: > > What about going to v9.x? At least for -current, although looking at > > the security history of 8.x, I think we should really think about > > doing it even for -stable. Leave the bind8 port for those guys that > > need some of its features. > > That's something that is worthy of being discussed. Personally, I use > BIND 9. But I know many people still run BIND 8 --- including heavy > hitters like the root name servers operators. > > FWIW, I stepped in to update BIND to 8.3.1-REL as Security Officer, > because of recent security bug fixes. In other words, I did it to fix > something broken. Moving to BIND 9 is a feature enhancement that will > require work on the part of our users. I'd like to see some > discussion about the tradeoffs before we decide to make such a move. Well like I tried to imply in my previous email, you can look at "upgrading to v9.x" as a feature enhancement or measured against the history of v8 as preventative security fixes. :-) I say let those who want to live on the security edge do so from ports/packages. :-) Just MHO. John -- John Hay -- John.Hay@icomtek.csir.co.za / jhay@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message