From: Matthijs Mekking Date: Wed, 11 May 2022 09:10:04 +0000 (+0200) Subject: Rewrap a paragraph in DNSSEC Validation section X-Git-Tag: v9.19.3~30^2~19 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=34dea43f9c2aa27e2c03526e8b486a69b31f063d;p=thirdparty%2Fbind9.git Rewrap a paragraph in DNSSEC Validation section No textual changes, just rewrapping to 80 characters. --- diff --git a/doc/arm/dnssec.inc.rst b/doc/arm/dnssec.inc.rst index 02bd96262ff..6a512ec4f06 100644 --- a/doc/arm/dnssec.inc.rst +++ b/doc/arm/dnssec.inc.rst @@ -215,10 +215,10 @@ The default is ``auto`` unless BIND is built with ``configure --disable-auto-validation``, in which case the default is ``yes``. -The keys specified in ``trust-anchors`` are copies of DNSKEY RRs for zones that are -used to form the first link in the cryptographic chain of trust. Keys configured -with the keyword ``static-key`` or ``static-ds`` are loaded directly into the -table of trust anchors, and can only be changed by altering the +The keys specified in ``trust-anchors`` are copies of ``DNSKEY`` RRs for zones +that are used to form the first link in the cryptographic chain of trust. Keys +configured with the keyword ``static-key`` or ``static-ds`` are loaded directly +into the table of trust anchors, and can only be changed by altering the configuration. Keys configured with ``initial-key`` or ``initial-ds`` are used to initialize :rfc:`5011` trust anchor maintenance, and are kept up-to-date automatically after the first time :iscman:`named` runs.