From: Peter Thomassen <peter@desec.io>
Date: Tue, 16 Apr 2024 14:06:09 +0000 (+0200)
Subject: auth docs: fix `direct-dnskey`
X-Git-Tag: rec-5.4.0-alpha0~21^2~13
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=7a0974180c8ee0f64784009dccda66c0a3fbb47a;p=thirdparty%2Fpdns.git

auth docs: fix `direct-dnskey`
---

diff --git a/docs/settings.rst b/docs/settings.rst
index 6c6a779785..4d8e4db2d5 100644
--- a/docs/settings.rst
+++ b/docs/settings.rst
@@ -575,8 +575,12 @@ Configure a delay to send out notifications, no delay by default.
 -  Boolean
 -  Default: no
 
-Read additional DNSKEY, CDS and CDNSKEY records from the records table/your BIND zonefile. If not
-set, DNSKEY, CDS and CDNSKEY records in the zonefiles are ignored.
+Read additional DNSKEY records from the records table/your BIND zonefile and use both when
+preparing responses. If not set, such records in the zonefiles are ignored.
+
+When automatic CDS and CDNSKEY publication (see :ref:`metadata-publish-cdnskey-publish-cds`)
+is enabled, this also applies to those types. If not set, such records are only considered
+when automatic publication is turned off.
 
 .. _setting-direct-dnskey-signature: