Add a note about salt length

Apparently it is confusing that you don't specify a specific salt,
but a salt length.
This commit is contained in:
Matthijs Mekking 2021-09-20 15:22:53 +02:00
parent a73a07832e
commit 9ddc23b2bf

View file

@ -5163,7 +5163,9 @@ The following options can be specified in a ``dnssec-policy`` statement:
The default is to use NSEC. The ``iterations``, ``optout`` and
``salt-length`` parts are optional, but if not set, the values in
the example above are the default NSEC3 parameters.
the example above are the default NSEC3 parameters. Note that you don't
specify a specific salt string, ``named`` will create a salt for you
of the provided salt length.
``zone-propagation-delay``
This is the expected propagation delay from the time when a zone is