From 9ddc23b2bfcbbb327a876a57b0f8313fd036507a Mon Sep 17 00:00:00 2001 From: Matthijs Mekking Date: Mon, 20 Sep 2021 15:22:53 +0200 Subject: [PATCH] Add a note about salt length Apparently it is confusing that you don't specify a specific salt, but a salt length. --- doc/arm/reference.rst | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/doc/arm/reference.rst b/doc/arm/reference.rst index ba41d40f75..725800dfcf 100644 --- a/doc/arm/reference.rst +++ b/doc/arm/reference.rst @@ -5163,7 +5163,9 @@ The following options can be specified in a ``dnssec-policy`` statement: The default is to use NSEC. The ``iterations``, ``optout`` and ``salt-length`` parts are optional, but if not set, the values in - the example above are the default NSEC3 parameters. + the example above are the default NSEC3 parameters. Note that you don't + specify a specific salt string, ``named`` will create a salt for you + of the provided salt length. ``zone-propagation-delay`` This is the expected propagation delay from the time when a zone is