Making dnssec's README consistent with other plugins' READMEs (#3252)

This commit is contained in:
Cricket Liu
2019-09-08 00:26:06 -07:00
committed by Miek Gieben
parent 9b192564ac
commit b156e0440f

View File

@@ -2,11 +2,11 @@
## Name ## Name
*dnssec* - enable on-the-fly DNSSEC signing of served data. *dnssec* - enables on-the-fly DNSSEC signing of served data.
## Description ## Description
With *dnssec* any reply that doesn't (or can't) do DNSSEC will get signed on the fly. Authenticated With *dnssec*, any reply that doesn't (or can't) do DNSSEC will get signed on the fly. Authenticated
denial of existence is implemented with NSEC black lies. Using ECDSA as an algorithm is preferred as denial of existence is implemented with NSEC black lies. Using ECDSA as an algorithm is preferred as
this leads to smaller signatures (compared to RSA). NSEC3 is *not* supported. this leads to smaller signatures (compared to RSA). NSEC3 is *not* supported.