diff --git a/bin/dig/dig.1 b/bin/dig/dig.1 index 9041c96282..7eafab2faa 100644 --- a/bin/dig/dig.1 +++ b/bin/dig/dig.1 @@ -367,6 +367,26 @@ and the query options that have been applied\&. This comment is printed by defau Toggle the display of comment lines in the output\&. The default is to print comments\&. .RE .PP +\fB+[no]cookie\fR\fB[=####]\fR +.RS 4 +Send an COOKIE EDNS option, containing an optional +\fIvalue\fR\&. Replaying a COOKIE from a previous response will allow the server to identify a previous client\&. The default is +\fB+nocookie\fR\&. +.sp +\fB+cookie\fR +is automatically set when +trace is in use, to better emulate the default queries from a nameserver\&. +.sp +This option was formerly called +\fB+[no]sit\fR +(Server Identity Token)\&. In BIND 9\&.10\&.0 through BIND 9\&.10\&.2, it sent the experimental option code 65001\&. This was changed to option code 10 in BIND 9\&.10\&.3 when the DNS COOKIE option was allocated\&. +.sp +The +\fB+[no]sit\fR +is now deprecated, but has been retained as a synonym for +\fB+[no]cookie\fR +for backward compatibility within the BIND 9\&.10 branch\&. +.RE +.PP \fB+[no]crypto\fR .RS 4 Toggle the display of cryptographic fields in DNSSEC records\&. The contents of these field are unnecessary to debug most DNSSEC validation failures and removing them makes it easier to see the common failures\&. The default is to display the fields\&. When omitted they are replaced by the string "[omitted]" or in the DNSKEY case the key id is displayed as the replacement, e\&.g\&. "[ key id = value ]"\&. @@ -579,12 +599,12 @@ instead\&. .PP \fB+[no]sit\fR\fB[=####]\fR .RS 4 -Send a DNS COOKIE option, with optional value\&. Replaying a DNS COOKIE from a previous response will allow the server to identify a previous client\&. The default is -\fB+nosit\fR\&. +This option is a synonym for +\fB+[no]cookie\fR\&. .sp -This option is -\fB+[no]cookie\fR -from BIND 9\&.11\&.0 onwards\&. BIND 9\&.10\&.0 through BIND 9\&.10\&.2 sent the experimental option code 65001\&. This was changed to 10 in BIND 9\&.10\&.3 when the DNS COOKIE option was allocated\&. +The +\fB+[no]sit\fR +is deprecated\&. .RE .PP \fB+split=W\fR diff --git a/bin/dig/dig.html b/bin/dig/dig.html index fbfad1f80d..1eca0a1a5b 100644 --- a/bin/dig/dig.html +++ b/bin/dig/dig.html @@ -482,6 +482,33 @@ The default is to print comments.
++[no]cookie[=####]
+ Send an COOKIE EDNS option, containing an optional
+ value. Replaying a COOKIE
+ from a previous response will allow the server to
+ identify a previous client. The default is
+ +nocookie.
+
+ +cookie is automatically set when +trace + is in use, to better emulate the default queries from a + nameserver. +
+
+ This option was formerly called +[no]sit
+ (Server Identity Token). In BIND 9.10.0 through BIND 9.10.2,
+ it sent the experimental option code 65001. This was
+ changed to option code 10 in BIND 9.10.3 when the DNS
+ COOKIE option was allocated.
+
+ The +[no]sit is now deprecated, but has
+ been retained as a synonym for +[no]cookie
+ for backward compatibility within the BIND 9.10 branch.
+
+[no]crypto@@ -756,17 +783,10 @@
+[no]sit[=####]
- Send a DNS COOKIE option, with optional value.
- Replaying a DNS COOKIE from a previous response will
- allow the server to identify a previous client. The
- default is +nosit.
+ This option is a synonym for +[no]cookie.
- This option is +[no]cookie from
- BIND 9.11.0 onwards. BIND 9.10.0 through BIND 9.10.2
- sent the experimental option code 65001. This was
- changed to 10 in BIND 9.10.3 when the DNS COOKIE
- option was allocated.
+ The +[no]sit is deprecated.
+split=W+[no]cookie[=####]
+ Send an COOKIE EDNS option, containing an optional
+ value. Replaying a COOKIE
+ from a previous response will allow the server to
+ identify a previous client. The default is
+ +nocookie.
+
+ +cookie is automatically set when +trace + is in use, to better emulate the default queries from a + nameserver. +
+
+ This option was formerly called +[no]sit
+ (Server Identity Token). In BIND 9.10.0 through BIND 9.10.2,
+ it sent the experimental option code 65001. This was
+ changed to option code 10 in BIND 9.10.3 when the DNS
+ COOKIE option was allocated.
+
+ The +[no]sit is now deprecated, but has
+ been retained as a synonym for +[no]cookie
+ for backward compatibility within the BIND 9.10 branch.
+
+[no]crypto@@ -774,17 +801,10 @@
+[no]sit[=####]
- Send a DNS COOKIE option, with optional value.
- Replaying a DNS COOKIE from a previous response will
- allow the server to identify a previous client. The
- default is +nosit.
+ This option is a synonym for +[no]cookie.
- This option is +[no]cookie from
- BIND 9.11.0 onwards. BIND 9.10.0 through BIND 9.10.2
- sent the experimental option code 65001. This was
- changed to 10 in BIND 9.10.3 when the DNS COOKIE
- option was allocated.
+ The +[no]sit is deprecated.
+split=W