From 4fcbe0652d0aa1ad3d3556212348a85a94c78bfd Mon Sep 17 00:00:00 2001 From: Wouter Wijngaards Date: Mon, 17 Jun 2013 11:20:42 +0000 Subject: [PATCH] - Fixup manpage syntax. git-svn-id: file:///svn/unbound/trunk@2912 be551aaa-1e26-0410-a405-d3ace91eadb9 --- doc/Changelog | 3 +++ doc/unbound.conf.5.in | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/doc/Changelog b/doc/Changelog index 752c0ed29..1cfd335ac 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,6 @@ +17 Jun 2013: Wouter + - Fixup manpage syntax. + 14 Jun 2013: Wouter - get_option and set_option support for log-time-ascii, python-script val-sig-skew-min and val-sig-skew-max. log-time-ascii takes effect diff --git a/doc/unbound.conf.5.in b/doc/unbound.conf.5.in index 888d34f6e..9ebd83c0b 100644 --- a/doc/unbound.conf.5.in +++ b/doc/unbound.conf.5.in @@ -497,7 +497,7 @@ unsigned to badly signed often. If turned off you run the risk of a downgrade attack that disables security for a zone. Default is on. .TP .B harden\-below\-nxdomain: \fI -From draft-vixie-dnsext-resimprove, returns nxdomain to queries for a name +From draft\-vixie\-dnsext\-resimprove, returns nxdomain to queries for a name below another name that is already known to be nxdomain. DNSSEC mandates noerror for empty nonterminals, hence this is possible. Very old software might return nxdomain for empty nonterminals (that usually happen for reverse