]> git.ipfire.org Git - thirdparty/bind9.git/commit
projects / thirdparty / bind9.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(merge: 9e8d72a a3d5963)
fix: doc: Correct RPZ NSDNAME name-order precedence documentation main
authorOndřej Surý <ondrej@isc.org>
Sat, 15 Aug 2026 17:20:27 +0000 (19:20 +0200)
committerOndřej Surý <ondrej@isc.org>
Sat, 15 Aug 2026 17:20:27 +0000 (19:20 +0200)
commitb9e3594027f5fc0b171b6186c031fed932464be3
treed15c0400de4fb0dc0d561ebec73bfefdce06a453tree | snapshot
parent9e8d72aeb535850d99ec2f759f57f0d92d48dd65commit | diff
parenta3d59633694e603e69e3fcf3473d26f6b9602a47commit | diff
fix: doc: Correct RPZ NSDNAME name-order precedence documentation

The ARM incorrectly stated that the canonically smallest
matched name server wins when multiple NSDNAME triggers
have otherwise equal precedence. BIND intentionally selects
the name appearing last in DNSSEC canonical order, as specified
by RPZ. The ARM and source comment have been corrected to describe
the existing behavior; runtime behavior is unchanged.

Closes #6348

Merge branch '6348-fix-rpz-nsdname-precedence-documentation' into 'main'

See merge request isc-projects/bind9!12590
Mirror of https://gitlab.isc.org/isc-projects/bind9.git