diff --git a/doc/arm/Bv9ARM-book.xml b/doc/arm/Bv9ARM-book.xml index e2a6e7f06b..516af30734 100644 --- a/doc/arm/Bv9ARM-book.xml +++ b/doc/arm/Bv9ARM-book.xml @@ -6104,10 +6104,25 @@ options { answer-cookie - This option is obsolete. - This option was used to prevent the sending of - a DNS COOKIE option in response to a request with - one present in BIND 9.11 and BIND 9.12. + When set to the default value of yes, + COOKIE EDNS options will be sent when applicable in + replies to client queries. If set to + no, COOKIE EDNS options will not + be sent in replies. This can only be set at the global + options level, not per-view. + + + answer-cookie is only available + as a temporary measure, for use when + named shares an IP address + with other servers that do not yet support DNS + COOKIE. A mismatch between servers on the same + address is not expected to cause operational + problems, but the option to disable COOKIE responses + so that all servers have the same behavior is + provided out of an abundance of caution. DNS COOKIE + is an important security mechanism and should not be + disabled unless absolutely necessary.