Commit b156e044 authored by Cricket Liu's avatar Cricket Liu Committed by Miek Gieben

Making dnssec's README consistent with other plugins' READMEs (#3252)

parent 9b192564
...@@ -2,11 +2,11 @@ ...@@ -2,11 +2,11 @@
## Name ## Name
*dnssec* - enable on-the-fly DNSSEC signing of served data. *dnssec* - enables on-the-fly DNSSEC signing of served data.
## Description ## Description
With *dnssec* any reply that doesn't (or can't) do DNSSEC will get signed on the fly. Authenticated With *dnssec*, any reply that doesn't (or can't) do DNSSEC will get signed on the fly. Authenticated
denial of existence is implemented with NSEC black lies. Using ECDSA as an algorithm is preferred as denial of existence is implemented with NSEC black lies. Using ECDSA as an algorithm is preferred as
this leads to smaller signatures (compared to RSA). NSEC3 is *not* supported. this leads to smaller signatures (compared to RSA). NSEC3 is *not* supported.
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment