From f31e6f4293475fcb451b1f758f457b4d652f3fdf Mon Sep 17 00:00:00 2001 From: Chris Hofstaedtler Date: Wed, 30 May 2018 00:25:32 +0200 Subject: [PATCH] docs/dnssec: improve HTML rendering of table --- pdns/recursordist/docs/dnssec.rst | 45 +++++++++++++++---------------- 1 file changed, 22 insertions(+), 23 deletions(-) diff --git a/pdns/recursordist/docs/dnssec.rst b/pdns/recursordist/docs/dnssec.rst index 3b19c694c..293026d38 100644 --- a/pdns/recursordist/docs/dnssec.rst +++ b/pdns/recursordist/docs/dnssec.rst @@ -45,29 +45,28 @@ What, when? ^^^^^^^^^^^ The descriptions above are a bit terse, here's a table describing different scenarios with regards to the ``dnssec`` mode. -+--------------+---------+---------------+---------------+---------------+---------------+ -| | ``off`` | ``process-no- | ``process`` | ``log-fail`` | ``validate`` | -| | | validate`` | | | | -+==============+=========+===============+===============+===============+===============+ -| Perform | No | No | Only on +AD | Always (logs | Always | -| validation | | | or +DO from | result) | | -| | | | client | | | -+--------------+---------+---------------+---------------+---------------+---------------+ -| SERVFAIL on | No | No | Only on +AD | Only on +AD | Always | -| bogus | | | or +DO from | or +DO from | | -| | | | client | client | | -+--------------+---------+---------------+---------------+---------------+---------------+ -| AD in | Never | Never | Only on +AD | Only on +AD | Only on +AD | -| response on | | | or +DO from | or +DO from | or +DO from | -| authenticate | | | client | client | client | -| d | | | | | | -| data | | | | | | -+--------------+---------+---------------+---------------+---------------+---------------+ -| RRSIGs/NSECs | No | Yes | Yes | Yes | Yes | -| in answer on | | | | | | -| +DO from | | | | | | -| client | | | | | | -+--------------+---------+---------------+---------------+---------------+---------------+ ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| | ``off`` | ``process-no-validate`` | ``process`` | ``log-fail`` | ``validate`` | ++==============+=========+=========================+===============+===============+===============+ +| Perform | No | No | Only on +AD | Always (logs | Always | +| validation | | | or +DO from | result) | | +| | | | client | | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| SERVFAIL on | No | No | Only on +AD | Only on +AD | Always | +| bogus | | | or +DO from | or +DO from | | +| | | | client | client | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| AD in | Never | Never | Only on +AD | Only on +AD | Only on +AD | +| response on | | | or +DO from | or +DO from | or +DO from | +| authenticate | | | client | client | client | +| d | | | | | | +| data | | | | | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ +| RRSIGs/NSECs | No | Yes | Yes | Yes | Yes | +| in answer on | | | | | | +| +DO from | | | | | | +| client | | | | | | ++--------------+---------+-------------------------+---------------+---------------+---------------+ **Note**: the ``dig`` tool sets the AD-bit in the query. This might lead to unexpected query results when testing. -- 2.40.0