mirror of
https://github.com/coredns/coredns.git
synced 2025-11-01 18:53:43 -04:00
Making dnssec's README consistent with other plugins' READMEs (#3252)
This commit is contained in:
@@ -2,11 +2,11 @@
|
||||
|
||||
## Name
|
||||
|
||||
*dnssec* - enable on-the-fly DNSSEC signing of served data.
|
||||
*dnssec* - enables on-the-fly DNSSEC signing of served data.
|
||||
|
||||
## Description
|
||||
|
||||
With *dnssec* any reply that doesn't (or can't) do DNSSEC will get signed on the fly. Authenticated
|
||||
With *dnssec*, any reply that doesn't (or can't) do DNSSEC will get signed on the fly. Authenticated
|
||||
denial of existence is implemented with NSEC black lies. Using ECDSA as an algorithm is preferred as
|
||||
this leads to smaller signatures (compared to RSA). NSEC3 is *not* supported.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user