mirror of
https://github.com/systemd/systemd
synced 2024-07-21 18:24:38 +00:00
man/resolve: update DNSSEC description
This behavior was changed.
Fixes: 9c47b33444
("resolved: enable DNS proxy mode if client wants DNSSEC")
This commit is contained in:
parent
5e418fe32a
commit
4e17de7fee
|
@ -170,9 +170,7 @@
|
|||
downgrade to non-DNSSEC mode by synthesizing a DNS response that suggests DNSSEC was not
|
||||
supported.</para>
|
||||
|
||||
<para>If set to false, DNS lookups are not DNSSEC validated. In this mode, or when set to
|
||||
<literal>allow-downgrade</literal> and the downgrade has happened, the resolver becomes
|
||||
security-unaware and all forwarded queries have DNSSEC OK (DO) bit unset.</para>
|
||||
<para>If set to false, DNS lookups are not DNSSEC validated.</para>
|
||||
|
||||
<para>Note that DNSSEC validation requires retrieval of additional DNS data, and thus results in a
|
||||
small DNS lookup time penalty.</para>
|
||||
|
|
Loading…
Reference in a new issue