BIND8 entering end of life; changes to ftp.isc.org (affects mirrors)

Adam Tkac atkac at redhat.com
Fri Aug 10 17:51:52 UTC 2007


Paul Vixie napsal(a):
> whereas BIND9 is now 8 years old,
> and BIND9 is performance-competitive against BIND8,
> and BIND9 conforms to more of the DNS protocol than BIND8,
> and BIND9 is more secure and more portable than BIND8,
> we are declaring BIND8 to be in "end of life" (like BIND4).
>
> if you are running BIND8 (or BIND4), you should upgrade to BIND9.
> if you are mirroring BIND8 (ftp://ftp.isc.org/isc/bind), please stop.
> (if you aren't mirroring BIND9 (ftp://ftp.isc.org/isc/bind9), you could.)
>
> the current version of BIND9 as of this moment is 9.4.1-P1.
> it can be retrieved from <ftp://ftp.isc.org/isc/bind9/9.4.1-P1/>.
> its release notes are at <http://www.isc.org/sw/bind/view?release=9.4.1-P1>.
>   

I don't think this is good idea. I don't know how many servers are BIND 
8 but if all BIND 8  servers will be replaced by BIND 9 it means that 
about 70% servers are BIND 9. I don't want imagine what could happen if 
someone find security hole in BIND 9 and start massive attack against 
DNS. Better could be wait to BIND 10 and put BIND 8  to EOL when BIND 10 
will be released.

Adam



More information about the bind-users mailing list