From: Petr Špaček <petr.spacek@nic.cz>
Date: Mon, 23 Apr 2018 08:18:21 +0000 (+0200)
Subject: docs: document our position on RFC 7706
X-Git-Tag: v2.3.0^2~2^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=375719d56586f1fedc1d10c12a82b69a6bb5ba7c;p=thirdparty%2Fknot-resolver.git

docs: document our position on RFC 7706
---

diff --git a/doc/modules.rst b/doc/modules.rst
index 1d4491f0e..3f278ae61 100644
--- a/doc/modules.rst
+++ b/doc/modules.rst
@@ -28,7 +28,8 @@ Knot DNS Resolver modules
 .. include:: ../modules/ta_signal_query/README.rst
 .. include:: ../modules/ta_sentinel/README.rst
 .. include:: ../modules/priming/README.rst
-.. include:: ../modules/serve_stale/README.rst
 .. include:: ../modules/detect_time_skew/README.rst
 .. include:: ../modules/detect_time_jump/README.rst
+.. include:: ../modules/rfc7706.rst
 .. include:: ../modules/prefill/README.rst
+.. include:: ../modules/serve_stale/README.rst
diff --git a/modules/prefill/README.rst b/modules/prefill/README.rst
index 678e9f2d5..e30e0c3ad 100644
--- a/modules/prefill/README.rst
+++ b/modules/prefill/README.rst
@@ -1,3 +1,5 @@
+.. _mod-prefill:
+
 Cache prefilling
 ----------------
 
diff --git a/modules/rfc7706.rst b/modules/rfc7706.rst
new file mode 100644
index 000000000..1615f3302
--- /dev/null
+++ b/modules/rfc7706.rst
@@ -0,0 +1,3 @@
+Root on lookback (RFC 7706)
+---------------------------
+Knot Resolver developers decided that pure implementation of :rfc:`7706` is a bad idea so it is not implemented in the form envisioned by the RFC. You can get the very similar effect without its downsides by combining `prefill <mod-prefill>`_ and `serve_stale <mod-serve_stale>`_ modules with Aggressive Use of DNSSEC-Validated Cache (:rfc:`8198`) behavior which is enabled automatically together with DNSSEC validation.