From ed03a3756baef081332c31ed999fd76fe9c3ebf6 Mon Sep 17 00:00:00 2001
From: Peter van Dijk <peter.van.dijk@netherlabs.nl>
Date: Mon, 4 Feb 2013 07:50:03 +0000
Subject: [PATCH] update docs for 3.5-rc2

git-svn-id: svn://svn.powerdns.com/pdns/trunk/pdns@3094 d19b8d6e-7fed-0310-83ef-9ca221ded41b
---
 pdns/docs/pdns.xml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/pdns/docs/pdns.xml b/pdns/docs/pdns.xml
index c7677f07c..4b8a5cbaf 100644
--- a/pdns/docs/pdns.xml
+++ b/pdns/docs/pdns.xml
@@ -132,6 +132,28 @@
         3.4, we are skipping an actual 3.4 release to avoid confusion.
       </para>
       </note></para>
+      <para>
+        Changes between RC1 and RC2:
+        <itemizedlist>
+          <listitem>
+            <para>
+              While Recursor 3.3 was not vulnerable to the specific attack noted in
+              <ulink url="https://www.isc.org/files/imce/ghostdomain_camera.pdf">'Ghost Domain Names: Revoked Yet Still Resolvable'</ulink>,
+              further investigation showed that a variant of the attack could work. This was fixed in r3085.
+            </para>
+          </listitem>
+          <listitem>
+            <para>
+              The auth-can-lower-ttl flag was removed, as it did not have any effect in most situations, and thus
+              did not operate as advertised. We now always comply with the related parts of RFC2181. Change in
+              r3092, closing t88.
+            </para>
+          </listitem>
+        </itemizedlist>
+      </para>
+      <para>
+        Changes below are in RC1 (and up).
+      </para>
       <para>
       New features:
       <itemizedlist>
-- 
2.40.0