From: Wouter Wijngaards Date: Mon, 23 May 2016 12:51:55 +0000 (+0000) Subject: - Fix #767: Reference to an expired Internet-Draft in X-Git-Tag: release-1.5.9rc1~23 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=e583c42b81c9e6ab75d0d6c213dd84371dae77be;p=thirdparty%2Funbound.git - Fix #767: Reference to an expired Internet-Draft in harden-below-nxdomain documentation. git-svn-id: file:///svn/unbound/trunk@3724 be551aaa-1e26-0410-a405-d3ace91eadb9 --- diff --git a/doc/Changelog b/doc/Changelog index 1eebf3ea2..4f26ea58a 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,7 @@ +23 May 2016: Ralph + - Fix #767: Reference to an expired Internet-Draft in + harden-below-nxdomain documentation. + 20 May 2016: Ralph - No QNAME minimisation fall-back for NXDOMAIN answers from DNSSEC signed zones. diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in index ef06b36cb..9f5f00712 100644 --- a/doc/unbound.conf.5.in +++ b/doc/unbound.conf.5.in @@ -577,6 +577,7 @@ might return nxdomain for empty nonterminals (that usually happen for reverse IP address lookups), and thus may be incompatible with this. To try to avoid this only DNSSEC-secure nxdomains are used, because the old software does not have DNSSEC. Default is off. +Currently, draft\-ietf\-dnsop\-nxdomain\-cut promotes this technique. .TP .B harden\-referral\-path: \fI Harden the referral path by performing additional queries for