Currently the stable BIND version from the package manager on a Debian 9 system is 9.10.3. However, it appears that the "cookie" flag is not supported on that version yet.
Does anyone know whether or not Debian intends to add support for this flag into BIND / dnsutils packages in Stretch? Will I need to build my own in order to be compliant? Or is running one minor version behind not a big deal in this case?