From 34dea43f9c2aa27e2c03526e8b486a69b31f063d Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Wed, 11 May 2022 11:10:04 +0200 Subject: [PATCH] Rewrap a paragraph in DNSSEC Validation section No textual changes, just rewrapping to 80 characters. --- doc/arm/dnssec.inc.rst | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/doc/arm/dnssec.inc.rst b/doc/arm/dnssec.inc.rst index 02bd96262f..6a512ec4f0 100644 --- a/doc/arm/dnssec.inc.rst +++ b/doc/arm/dnssec.inc.rst @@ -215,10 +215,10 @@ The default is ``auto`` unless BIND is built with ``configure --disable-auto-validation``, in which case the default is ``yes``. -The keys specified in ``trust-anchors`` are copies of DNSKEY RRs for zones that are -used to form the first link in the cryptographic chain of trust. Keys configured -with the keyword ``static-key`` or ``static-ds`` are loaded directly into the -table of trust anchors, and can only be changed by altering the +The keys specified in ``trust-anchors`` are copies of ``DNSKEY`` RRs for zones +that are used to form the first link in the cryptographic chain of trust. Keys +configured with the keyword ``static-key`` or ``static-ds`` are loaded directly +into the table of trust anchors, and can only be changed by altering the configuration. Keys configured with ``initial-key`` or ``initial-ds`` are used to initialize :rfc:`5011` trust anchor maintenance, and are kept up-to-date automatically after the first time :iscman:`named` runs.