From: Petr Špaček Date: Wed, 8 Jan 2020 08:48:58 +0000 (+0100) Subject: doc: move DNSSEC to the end, users should not touch it anyway X-Git-Tag: v5.0.0~8^2~18 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=be5301b7e1de9a782ea6592c317dc6f6860fac96;p=thirdparty%2Fknot-resolver.git doc: move DNSSEC to the end, users should not touch it anyway Also remove extra headers for trust anchors and mode(), this is an implementation detail not important for users. --- diff --git a/daemon/lua/trust_anchors.rst b/daemon/lua/trust_anchors.rst index 7788000c5..2c267e6bf 100644 --- a/daemon/lua/trust_anchors.rst +++ b/daemon/lua/trust_anchors.rst @@ -1,9 +1,7 @@ -Trust anchors -============= - .. warning:: Options in this section are intended only for expert users and normally should not be needed. +Since version 4.0, **DNSSEC validation is enabled by default**. If you really need to turn DNSSEC off and are okay with lowering security of your system by doing so, add the following snippet to your configuration file. diff --git a/doc/config-dnssec.rst b/doc/config-dnssec.rst index 0da31343c..e8842ba3f 100644 --- a/doc/config-dnssec.rst +++ b/doc/config-dnssec.rst @@ -4,14 +4,11 @@ DNSSEC, data verification ************************* -Since version 4.0, **DNSSEC validation is enabled by default**. -This is secure default and should not be changed unless absolutely necessary. +Good news! Knot Resolver uses secure configuration by default, and this configuration +should not be changed unless absolutely necessary, so feel free to skip over this section. .. include:: ../daemon/lua/trust_anchors.rst -TODO: Some heading? -=================== - DNSSEC is main technology to protect data, but it is also possible to change how strictly resolver checks data from insecure DNS zones: diff --git a/doc/index.rst b/doc/index.rst index c2f178a75..7a35d738b 100644 --- a/doc/index.rst +++ b/doc/index.rst @@ -22,10 +22,10 @@ and it provides a state-machine like API for extensions. config-overview config-network - config-dnssec config-logging-monitoring config-policy config-performance + config-dnssec config-experimental .. _operation: