doc: clarify tinydns wildcard divergence

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

diff --git a/docs/backends/tinydns.rst b/docs/backends/tinydns.rst
index ba56c2c0df1fe11d277ba1a0fae20ca229c5bd28..f1e8b0d0c76100f902a233cab0ea95c93a30c931 100644 (file)
--- a/docs/backends/tinydns.rst
+++ b/docs/backends/tinydns.rst
@@ -150,10 +150,14 @@ number of links to tools/cgi-scripts that allow you to create records.
 useful record building scripts on his
 `djbdnsRecordBuilder <https://andersbrownworth.com/projects/sysadmin/djbdnsRecordBuilder/>`__.
 
-PowerDNS and TinyDNS handle wildcards differently. Looking up
-foo.www.example.com with the below records on TinyDNS will return
-198.51.100.1, PowerDNS will return NXDOMAIN. According to :rfc:`4592` \*.example.com should only
-match subdomains in under example.com, not \*.\*.example.com. This
+PowerDNS and TinyDNS handle wildcards differently.
+PowerDNS treats defined domains as masking sibling wildcards.
+Whereas TinyDNS does *not* treat defined domains as masking sibling wildcards.
+For the below records, both will return ``198.51.100.1``
+for ``alpha.beta.example.com`` as there's no defined ``beta.example.com``.
+But looking up ``foo.www.example.com`` on TinyDNS will return
+``198.51.100.1``, PowerDNS will return NXDOMAIN. According to :rfc:`4592` \*.example.com should only
+match subdomains under example.com, not \*.\*.example.com. This
 compatibility issue is `noted on the axfr-get page for the djbdns
 suite <https://cr.yp.to/djbdns/axfr-get.html>`__.