[jnw2]

FLAVOR: Ubuntu Server

HEADLINE: bind package with support for DNS cookies

DESCRIPTION: https://kb.isc.org/article/AA-01387/0/DNS-Cookies-in-BIND-9.... describes DNS cookies; last I checked, it seemed that Ubuntu wasn't in any hurry to upgrade to a version of bind that turns DNS cookies on by default, and also probably wasn't passing the build time option to turn on DNS cookies on the version that was being shipped.

[fanf2]

I guess Ububtu is waiting for Debian to update to BIND 9.11, but Stretch is still on 9.10. It is a pity the next Debian release is not on 9.11 since that will be an ESV branch. https://www.isc.org/downloads/software-support-policy/