"dnssec-lookaside auto;" This is the equivalent
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
Note: The trusted key is hard-coded into named,
but is also stored in (and can be overridden
by) $sysconfdir/bind.keys. As the ISC DLV key
rolls over it can be kept up to date by replacing
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
(No structure change here.)
(Note that the "Organization of This Document" is somewhat wrong,
but I am not fixing this yet as I have to consider my restructuring
ideas for ARM first.)
Add formatting tags around syntax that was missing. Be consistent.
Remove a few paragraph breaks before "For example:".
Fix typo "will will".
Change description of pid-file to not mislead (since other programs
don't parse named.conf to figure out the PID file :)
Remove some unneeded commas.
Minor grammar fixes.
Clarify edns-udp-size to say "... to control the size of packets received."
Reformatted that paragragh too (in docbook, not rendered version.
(TODO: cross-reference these descriptions.)
Hyphenate "built-in" to be consistent.
Remove space in "100000" (for style). (Some use space, period, comma
for thousands.)
Capitalize TTL in one place.
Say that the -t option is "for named". (Reformat that paragraph in
docbook while here.)
named is in /usr/local/sbin not /usr/local/bin for example.
BIND 8 is deprecated. Don't publicly say we do security-related patches
for BIND 4 or BIND 8.
(Note I have many, many more improvements to do. Trying to catch up on
all my uncommitted fixes some dating back to 2007. Note I can't easily
-- due to time -- commit all separately and then check to see if the
apply to older ARMs and backport. If you think differently on how this
should be approached or if you have time to backport some of these
or want me to pick at least some to backport, please let me know.)
