From 604f8e7797ce82cc247a12d12da70a1fe55d15a0 Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Mon, 15 Jan 2024 09:17:01 +0100 Subject: [PATCH] Improve parental-agents definition in ARM "A parental agent is the entity that is allowed to change a zone's delegation information" is untrue, because it is possible to use some hidden server or a validating resolver. Also the new text makes it more clear that named sends DS queries to these servers. --- doc/arm/reference.rst | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index 3ebcfc82a5..5949ec14bd 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -1060,10 +1060,10 @@ responses such as NXDOMAIN. :any:`parental-agents` Block Definition and Usage ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -:any:`parental-agents` lists allow for a common set of parental agents to be easily -used by multiple primary and secondary zones. -A parental agent is the entity that is allowed to -change a zone's delegation information (defined in :rfc:`7344`). +:any:`parental-agents` lists allow for a common set of parental agents to be +easily used by multiple primary and secondary zones. A "parental agent" is a +trusted DNS server that is queried to check if DS records for a given zones +are up-to-date. :any:`primaries` Block Grammar ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~