diff options
| author | Lennart Poettering <lennart@poettering.net> | 2016-01-30 15:04:56 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2016-01-30 15:04:56 +0100 |
| commit | dcabda41558bf80724992d3973388af6974af5eb (patch) | |
| tree | 24fed07b4bfdb41c66c029fb21e6f4e262ca147c /man/resolved.conf.xml | |
| parent | 132bdb0cf8eff3eba3092962b6d36e6c3e75da14 (diff) | |
| parent | c542f805ddc3ae28007c15827ef2e8a8247452bc (diff) | |
Merge pull request #2469 from keszybz/resolved-2
Resolved 2
Diffstat (limited to 'man/resolved.conf.xml')
| -rw-r--r-- | man/resolved.conf.xml | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/man/resolved.conf.xml b/man/resolved.conf.xml index f9e4d548e7..920ce9e89b 100644 --- a/man/resolved.conf.xml +++ b/man/resolved.conf.xml @@ -131,8 +131,8 @@ <listitem><para>Takes a boolean argument or <literal>allow-downgrade</literal>. If true all DNS lookups are DNSSEC-validated locally (excluding LLMNR and Multicast - DNS). If a response for a lookup request is detected invalid - this is returned as lookup failure to applications. Note that + DNS). If the response to a lookup request is detected to be invalid + a lookup failure is returned to applications. Note that this mode requires a DNS server that supports DNSSEC. If the DNS server does not properly support DNSSEC all validations will fail. If set to <literal>allow-downgrade</literal> DNSSEC @@ -153,7 +153,7 @@ is built into the resolver, additional trust anchors may be defined with <citerefentry><refentrytitle>dnssec-trust-anchors.d</refentrytitle><manvolnum>5</manvolnum></citerefentry>. - Trust anchors may change in regular intervals, and old trust + Trust anchors may change at regular intervals, and old trust anchors may be revoked. In such a case DNSSEC validation is not possible until new trust anchors are configured locally or the resolver software package is updated with the new root |