docs/dnssec: improve HTML rendering of table

diff --git a/pdns/recursordist/docs/dnssec.rst b/pdns/recursordist/docs/dnssec.rst
index 3b19c694c8024b907e9080eec7fd93e0956a97c6..293026d38b08e21c9f81e559969aeae76892008e 100644 (file)
--- a/pdns/recursordist/docs/dnssec.rst
+++ b/pdns/recursordist/docs/dnssec.rst
@@ -45,29 +45,28 @@ What, when?
 ^^^^^^^^^^^
 The descriptions above are a bit terse, here's a table describing different scenarios with regards to the ``dnssec`` mode.
 
-+--------------+---------+---------------+---------------+---------------+---------------+
-|              | ``off`` | ``process-no- | ``process``   | ``log-fail``  | ``validate``  |
-|              |         | validate``    |               |               |               |
-+==============+=========+===============+===============+===============+===============+
-| Perform      | No      | No            | Only on +AD   | Always (logs  | Always        |
-| validation   |         |               | or +DO from   | result)       |               |
-|              |         |               | client        |               |               |
-+--------------+---------+---------------+---------------+---------------+---------------+
-| SERVFAIL on  | No      | No            | Only on +AD   | Only on +AD   | Always        |
-| bogus        |         |               | or +DO from   | or +DO from   |               |
-|              |         |               | client        | client        |               |
-+--------------+---------+---------------+---------------+---------------+---------------+
-| AD in        | Never   | Never         | Only on +AD   | Only on +AD   | Only on +AD   |
-| response on  |         |               | or +DO from   | or +DO from   | or +DO from   |
-| authenticate |         |               | client        | client        | client        |
-| d            |         |               |               |               |               |
-| data         |         |               |               |               |               |
-+--------------+---------+---------------+---------------+---------------+---------------+
-| RRSIGs/NSECs | No      | Yes           | Yes           | Yes           | Yes           |
-| in answer on |         |               |               |               |               |
-| +DO from     |         |               |               |               |               |
-| client       |         |               |               |               |               |
-+--------------+---------+---------------+---------------+---------------+---------------+
++--------------+---------+-------------------------+---------------+---------------+---------------+
+|              | ``off`` | ``process-no-validate`` | ``process``   | ``log-fail``  | ``validate``  |
++==============+=========+=========================+===============+===============+===============+
+| Perform      | No      | No                      | Only on +AD   | Always (logs  | Always        |
+| validation   |         |                         | or +DO from   | result)       |               |
+|              |         |                         | client        |               |               |
++--------------+---------+-------------------------+---------------+---------------+---------------+
+| SERVFAIL on  | No      | No                      | Only on +AD   | Only on +AD   | Always        |
+| bogus        |         |                         | or +DO from   | or +DO from   |               |
+|              |         |                         | client        | client        |               |
++--------------+---------+-------------------------+---------------+---------------+---------------+
+| AD in        | Never   | Never                   | Only on +AD   | Only on +AD   | Only on +AD   |
+| response on  |         |                         | or +DO from   | or +DO from   | or +DO from   |
+| authenticate |         |                         | client        | client        | client        |
+| d            |         |                         |               |               |               |
+| data         |         |                         |               |               |               |
++--------------+---------+-------------------------+---------------+---------------+---------------+
+| RRSIGs/NSECs | No      | Yes                     | Yes           | Yes           | Yes           |
+| in answer on |         |                         |               |               |               |
+| +DO from     |         |                         |               |               |               |
+| client       |         |                         |               |               |               |
++--------------+---------+-------------------------+---------------+---------------+---------------+
 
 **Note**: the ``dig`` tool sets the AD-bit in the query.
 This might lead to unexpected query results when testing.