docs: document our position on RFC 7706

diff --git a/doc/modules.rst b/doc/modules.rst
index 1d4491f0e25c7c6b2d3d38a5e5b9d635cae1f6e2..3f278ae61cdbd80703816c096fd8d6118449e8ee 100644 (file)
--- a/doc/modules.rst
+++ b/doc/modules.rst
@@ -28,7 +28,8 @@ Knot DNS Resolver modules
 .. include:: ../modules/ta_signal_query/README.rst
 .. include:: ../modules/ta_sentinel/README.rst
 .. include:: ../modules/priming/README.rst
-.. include:: ../modules/serve_stale/README.rst
 .. include:: ../modules/detect_time_skew/README.rst
 .. include:: ../modules/detect_time_jump/README.rst
+.. include:: ../modules/rfc7706.rst
 .. include:: ../modules/prefill/README.rst
+.. include:: ../modules/serve_stale/README.rst

diff --git a/modules/prefill/README.rst b/modules/prefill/README.rst
index 678e9f2d51113084b638d73d77914fe9daea9095..e30e0c3ad1ab366d3eee495db35e89349f16827f 100644 (file)
--- a/modules/prefill/README.rst
+++ b/modules/prefill/README.rst
@@ -1,3 +1,5 @@
+.. _mod-prefill:
+
 Cache prefilling
 ----------------
 

diff --git a/modules/rfc7706.rst b/modules/rfc7706.rst
new file mode 100644 (file)
index 0000000..1615f33
--- /dev/null
+++ b/modules/rfc7706.rst
@@ -0,0 +1,3 @@
+Root on lookback (RFC 7706)
+---------------------------
+Knot Resolver developers decided that pure implementation of :rfc:`7706` is a bad idea so it is not implemented in the form envisioned by the RFC. You can get the very similar effect without its downsides by combining `prefill <mod-prefill>`_ and `serve_stale <mod-serve_stale>`_ modules with Aggressive Use of DNSSEC-Validated Cache (:rfc:`8198`) behavior which is enabled automatically together with DNSSEC validation.