Co-authored-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
For the ``ZONEMD`` part, if the zone has a ``ZONEMD`` record, the digest of the zone wil be verified.
-For both parts failure of validation will prevent the downloaded zone contents to be inserted into the cache.
+For both parts failure of validation will prevent the downloaded zone contents from being inserted into the cache.
Absence of ``DNSSEC`` records is not considered a failure if the parent zone or negative trust anchor indicate the zone is ``Insecure``.
Absence of ``ZONEMD`` records is not considered a failure.
This behaviour can be tuned with the ``zoneToCache`` specific `zonemd`_ and `dnssec`_ settings described below.
File descriptor usage
^^^^^^^^^^^^^^^^^^^^^
The number of file descriptors used by the Recursor has increased because the Recursor now keeps idle outgoing TCP/DoT connections open for a while.
-The extra file descriptors used compared to previous versions of the Recursor is :ref:`setting-tcp-out-max-idle-per-thread` times the number of worker threads (:ref:`setting-threads`).
+The extra file descriptors used in comparison to previous versions of the Recursor is :ref:`setting-tcp-out-max-idle-per-thread` times the number of worker threads (:ref:`setting-threads`).
New settings
^^^^^^^^^^^^