use return rather than exit
add attributes to fatal, warn and delve_log
3744.   [experimental]  SIT: send and process Source Identity Tokens
                        (which are similar to DNS Cookies by Donald Eastlake)
                        and are designed to help clients detect off path
                        spoofed responses and for servers to detect legitimate
                        clients.

                        SIT use a experimental EDNS option code (65001).

                        SIT can be enabled via --enable-developer or
                        --enable-sit.  It is on by default in Windows.

                        RRL processing as been updated to know about SIT with
                        legitimate clients not being rate limited. [RT #35389]
[master] edit
update SIT description
add 3rd
test for AES_encrypt and fall back to sha256
[master] add "--with-tuning=large" option

3745.	[func]		"configure --with-tuning=large" adjusts various
			compiled-in constants and default settings to
			values suited to large servers with abundant
			memory. [RT #29538]
[master] add SIT and the new stats counters to README
set ISC_OPENSSL_LIBS to DST_OPENSSL_LIBS for want_openssl_aes=yes
[master] max-zone-ttl

3746.	[func]		New "max-zone-ttl" option enforces maximum
			TTLs for zones. If loading a zone containing a
			higher TTL, the load fails. DDNS updates with
			higher TTLs are accepted but the TTL is truncated.
			(Note: Currently supported for master zones only;
			inline-signing slaves will be added.) [RT #38405]
[master] fix dns_resolver_destroyfetch race

3747.	[bug]		A race condition could lead to a core dump when
			destroying a resolver fetch object. [RT #35385]
3748.   [func]          Use delve to test dns_client interfaces. [RT #35383]
add client cookie in hmacsha*
--with-openssl=no failed
silence unreachable statement by adding #if/#endif
silence Function returns no value
[master] change tag
WIN32 master fixes
update copyright notice