From: Matthijs Mekking Date: Mon, 15 Jan 2024 08:17:01 +0000 (+0100) Subject: Improve parental-agents definition in ARM X-Git-Tag: v9.19.22~62^2~1 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=604f8e7797ce82cc247a12d12da70a1fe55d15a0;p=thirdparty%2Fbind9.git Improve parental-agents definition in ARM "A parental agent is the entity that is allowed to change a zone's delegation information" is untrue, because it is possible to use some hidden server or a validating resolver. Also the new text makes it more clear that named sends DS queries to these servers. --- diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index 3ebcfc82a59..5949ec14bde 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -1060,10 +1060,10 @@ responses such as NXDOMAIN. :any:`parental-agents` Block Definition and Usage ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -:any:`parental-agents` lists allow for a common set of parental agents to be easily -used by multiple primary and secondary zones. -A parental agent is the entity that is allowed to -change a zone's delegation information (defined in :rfc:`7344`). +:any:`parental-agents` lists allow for a common set of parental agents to be +easily used by multiple primary and secondary zones. A "parental agent" is a +trusted DNS server that is queried to check if DS records for a given zones +are up-to-date. :any:`primaries` Block Grammar ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~