Commit 9f69de74 authored by Libor Peltan's avatar Libor Peltan Committed by Daniel Salzman
Browse files

doc: updated onlinesign section to current limitations

parent 45fc79f8
......@@ -41,14 +41,12 @@ a DNSSEC validating resolver.
* RRSIG records are synthesized for authoritative content of the zone.
.. rubric:: Known issues:
* The delegations are not signed correctly.
* CDNSKEY and CDS records are generated as usual to publish valid Secure Entry Point.
* Some CNAME records are not signed correctly.
.. rubric:: Known issues:
* The automatic policy-based key rotation does not work well, as the rotation
events are invoked just at server (re)load.
* The `knotc zone-ksk-submitted` command does not work well and is discouraged.
The module must be reloaded afterwards.
.. rubric:: Limitations:
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment