ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Add a note about salt length

Browse Source 
Apparently it is confusing that you don't specify a specific salt,
but a salt length.
This commit is contained in:
Matthijs Mekking
2021-09-20 15:22:53 +02:00
parent a73a07832e
commit 9ddc23b2bf
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
doc/arm/reference.rst
View File

@@ -5163,7 +5163,9 @@ The following options can be specified in a ``dnssec-policy`` statement:
The default is to use NSEC. The ``iterations``, ``optout`` and
``salt-length`` parts are optional, but if not set, the values in
the example above are the default NSEC3 parameters.
the example above are the default NSEC3 parameters. Note that you don't
specify a specific salt string, ``named`` will create a salt for you
of the provided salt length.
``zone-propagation-delay``
This is the expected propagation delay from the time when a zone is