- Fix #767: Reference to an expired Internet-Draft in

  harden-below-nxdomain documentation.

git-svn-id: file:///svn/unbound/trunk@3724 be551aaa-1e26-0410-a405-d3ace91eadb9

diff --git a/doc/Changelog b/doc/Changelog
index 1eebf3ea22cef2c0cb2120fcbbb65d7853ad2004..4f26ea58a57791564afacbbd03a7841a5a2c28ae 100644 (file)
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+23 May 2016: Ralph
+       - Fix #767:  Reference to an expired Internet-Draft in
+         harden-below-nxdomain documentation.
+
 20 May 2016: Ralph
        - No QNAME minimisation fall-back for NXDOMAIN answers from DNSSEC 
          signed zones.

diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in
index ef06b36cbc8fffc4d05653780750bd8ada75eb73..9f5f00712e3c3cc98731cf8f06e45ca91bbcdb60 100644 (file)
--- a/doc/unbound.conf.5.in
+++ b/doc/unbound.conf.5.in
@@ -577,6 +577,7 @@ might return nxdomain for empty nonterminals (that usually happen for reverse
 IP address lookups), and thus may be incompatible with this.  To try to avoid
 this only DNSSEC-secure nxdomains are used, because the old software does not
 have DNSSEC.  Default is off.
+Currently, draft\-ietf\-dnsop\-nxdomain\-cut promotes this technique.
 .TP
 .B harden\-referral\-path: \fI<yes or no>
 Harden the referral path by performing additional queries for