From: Matthijs Mekking Date: Mon, 20 Sep 2021 13:22:53 +0000 (+0200) Subject: Add a note about salt length X-Git-Tag: v9.17.19~28^2~1 X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=9ddc23b2bfcbbb327a876a57b0f8313fd036507a;p=thirdparty%2Fbind9.git Add a note about salt length Apparently it is confusing that you don't specify a specific salt, but a salt length. --- diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index ba41d40f755..725800dfcf9 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -5163,7 +5163,9 @@ The following options can be specified in a ``dnssec-policy`` statement: The default is to use NSEC. The ``iterations``, ``optout`` and ``salt-length`` parts are optional, but if not set, the values in - the example above are the default NSEC3 parameters. + the example above are the default NSEC3 parameters. Note that you don't + specify a specific salt string, ``named`` will create a salt for you + of the provided salt length. ``zone-propagation-delay`` This is the expected propagation delay from the time when a zone is