outgoing connections (e.g. the ones used to download zone from
primaries via TLS). Providing any of the mentioned options will enable
server authentication. If :any:`remote-hostname` is provided but :any:`ca-file` is
-missed, then the platform-specific certificate authority certificates
+missing, then the platform-specific certificate authority certificates
are used for authentication. The set roughly corresponds to the one
used by WEB-browsers to authenticate HTTPS hosts. On the other hand,
if :any:`ca-file` is provided but :any:`remote-hostname` is missing, then the