BIND8 entering end of life; changes to ftp.isc.org (affects mirrors)
Adam Tkac
atkac at redhat.com
Fri Aug 10 17:51:52 UTC 2007
Paul Vixie napsal(a):
> whereas BIND9 is now 8 years old,
> and BIND9 is performance-competitive against BIND8,
> and BIND9 conforms to more of the DNS protocol than BIND8,
> and BIND9 is more secure and more portable than BIND8,
> we are declaring BIND8 to be in "end of life" (like BIND4).
>
> if you are running BIND8 (or BIND4), you should upgrade to BIND9.
> if you are mirroring BIND8 (ftp://ftp.isc.org/isc/bind), please stop.
> (if you aren't mirroring BIND9 (ftp://ftp.isc.org/isc/bind9), you could.)
>
> the current version of BIND9 as of this moment is 9.4.1-P1.
> it can be retrieved from <ftp://ftp.isc.org/isc/bind9/9.4.1-P1/>.
> its release notes are at <http://www.isc.org/sw/bind/view?release=9.4.1-P1>.
>
I don't think this is good idea. I don't know how many servers are BIND
8 but if all BIND 8 servers will be replaced by BIND 9 it means that
about 70% servers are BIND 9. I don't want imagine what could happen if
someone find security hole in BIND 9 and start massive attack against
DNS. Better could be wait to BIND 10 and put BIND 8 to EOL when BIND 10
will be released.
Adam
More information about the bind-users
mailing list