From: Peter van Dijk Date: Fri, 14 Feb 2020 19:52:08 +0000 (+0100) Subject: add upgrade notes for the new NSEC(3) TTLs X-Git-Tag: auth-4.3.0-beta2~5^2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F8811%2Fhead;p=thirdparty%2Fpdns.git add upgrade notes for the new NSEC(3) TTLs --- diff --git a/docs/dnssec/operational.rst b/docs/dnssec/operational.rst index 30c52c9af7..8c532de1b3 100644 --- a/docs/dnssec/operational.rst +++ b/docs/dnssec/operational.rst @@ -228,6 +228,8 @@ AXFR-serving, a lot of signing needs to happen. Most best practices are documented in :rfc:`6781`. +.. _dnssec-ttl-notes: + Some notes on TTL usage ----------------------- diff --git a/docs/upgrading.rst b/docs/upgrading.rst index a2af8b9ebc..5de844bc50 100644 --- a/docs/upgrading.rst +++ b/docs/upgrading.rst @@ -11,6 +11,12 @@ upgrade notes if your version is older than 3.4.2. 4.2.x to 4.3.0 -------------- +NSEC(3) TTL changed +^^^^^^^^^^^^^^^^^^^ + +NSEC(3) records now use the negative TTL, instead of the SOA minimum TTL. +See :ref:`the DNSSEC TTL notes ` for more information. + Lua Netmask class methods changed ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^