From: Chris Hofstaedtler Date: Tue, 29 May 2018 22:25:32 +0000 (+0200) Subject: docs/dnssec: improve HTML rendering of table X-Git-Tag: dnsdist-1.3.1~29^2 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=f31e6f4293475fcb451b1f758f457b4d652f3fdf;p=pdns docs/dnssec: improve HTML rendering of table --- diff --git a/pdns/recursordist/docs/dnssec.rst b/pdns/recursordist/docs/dnssec.rst index 3b19c694c..293026d38 100644 --- a/pdns/recursordist/docs/dnssec.rst +++ b/pdns/recursordist/docs/dnssec.rst @@ -45,29 +45,28 @@ What, when? ^^^^^^^^^^^ The descriptions above are a bit terse, here's a table describing different scenarios with regards to the ``dnssec`` mode. -+--------------+---------+---------------+---------------+---------------+---------------+ -| | ``off`` | ``process-no- | ``process`` | ``log-fail`` | ``validate`` | -| | | validate`` | | | | -+==============+=========+===============+===============+===============+===============+ -| Perform | No | No | Only on +AD | Always (logs | Always | -| validation | | | or +DO from | result) | | -| | | | client | | | -+--------------+---------+---------------+---------------+---------------+---------------+ -| SERVFAIL on | No | No | Only on +AD | Only on +AD | Always | -| bogus | | | or +DO from | or +DO from | | -| | | | client | client | | -+--------------+---------+---------------+---------------+---------------+---------------+ -| AD in | Never | Never | Only on +AD | Only on +AD | Only on +AD | -| response on | | | or +DO from | or +DO from | or +DO from | -| authenticate | | | client | client | client | -| d | | | | | | -| data | | | | | | -+--------------+---------+---------------+---------------+---------------+---------------+ -| RRSIGs/NSECs | No | Yes | Yes | Yes | Yes | -| in answer on | | | | | | -| +DO from | | | | | | -| client | | | | | | -+--------------+---------+---------------+---------------+---------------+---------------+ ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| | ``off`` | ``process-no-validate`` | ``process`` | ``log-fail`` | ``validate`` | ++==============+=========+=========================+===============+===============+===============+ +| Perform | No | No | Only on +AD | Always (logs | Always | +| validation | | | or +DO from | result) | | +| | | | client | | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| SERVFAIL on | No | No | Only on +AD | Only on +AD | Always | +| bogus | | | or +DO from | or +DO from | | +| | | | client | client | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| AD in | Never | Never | Only on +AD | Only on +AD | Only on +AD | +| response on | | | or +DO from | or +DO from | or +DO from | +| authenticate | | | client | client | client | +| d | | | | | | +| data | | | | | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| RRSIGs/NSECs | No | Yes | Yes | Yes | Yes | +| in answer on | | | | | | +| +DO from | | | | | | +| client | | | | | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ **Note**: the ``dig`` tool sets the AD-bit in the query. This might lead to unexpected query results when testing.