github/coredns.io
4
0
Fork 0
mirror of https://github.com/coredns/coredns.io.git synced 2026-10-19 16:15:37 +00:00
Code Issues Releases Wiki Activity

auto content sync

Browse Source
This commit is contained in:
coredns-auto-sync[bot]
2021-04-05 13:49:45 +00:00
parent 2895c96eff
commit 87e729b96b
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/plugins/dnssec.md
+5 -2
View File
@@ -4,7 +4,7 @@ description = "*dnssec* enables on-the-fly DNSSEC signing of served data."
weight = 14
tags = ["plugin", "dnssec"]
categories = ["plugin"]
date = "2020-03-31T06:18:58.8775883"
date = "2021-04-05T13:49:45.8774584"
+++
## Description
@@ -34,8 +34,11 @@ ZSK/KSK split. All signing operations are done online.
Authenticated denial of existence is implemented with NSEC black lies. Using ECDSA as an algorithm
is preferred as this leads to smaller signatures (compared to RSA). NSEC3 is *not* supported.
As the *dnssec* plugin can't see the original TTL of the RRSets it signs, it will always use 3600s
as the value.
If multiple *dnssec* plugins are specified in the same zone, the last one specified will be
used (See [bugs](#bugs)).
used.
* **ZONES** zones that should be signed. If empty, the zones from the configuration block
are used.