]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
update
authorMark Andrews <marka@isc.org>
Tue, 9 Sep 2008 05:42:17 +0000 (05:42 +0000)
committerMark Andrews <marka@isc.org>
Tue, 9 Sep 2008 05:42:17 +0000 (05:42 +0000)
FAQ.xml

diff --git a/FAQ.xml b/FAQ.xml
index fb1d3d560e090d85050e136d59be089bbd5ebebd..44de0058971ba9b3371c3ddeddc8ed5d6d9f76e7 100644 (file)
--- a/FAQ.xml
+++ b/FAQ.xml
@@ -17,7 +17,7 @@
  - PERFORMANCE OF THIS SOFTWARE.
 -->
 
-<!-- $Id: FAQ.xml,v 1.45 2008/09/09 05:02:38 marka Exp $ -->
+<!-- $Id: FAQ.xml,v 1.46 2008/09/09 05:42:17 marka Exp $ -->
 
 <article class="faq">
   <title>Frequently Asked Questions about BIND 9</title>
@@ -1064,9 +1064,11 @@ empty:
       </question>
       <answer>
        <para>
-         NSEC3 records are strictly meta data and can only be returned in
-         the authority section.  This simplifies processing and removes
-         the paradox of a NSEC3 record proving it's own non-existance.
+         NSEC3 records are strictly meta data and can only be
+         returned in the authority section.  This is done so that
+         signing the zone using NSEC3 records does not bring names
+         into existance that do not exist in the unsigned version
+         of the zone.
        </para>
       </answer>
     </qandaentry>