diff --git a/FAQ.xml b/FAQ.xml index fb1d3d560e090d85050e136d59be089bbd5ebebd..44de0058971ba9b3371c3ddeddc8ed5d6d9f76e7 100644 --- a/FAQ.xml +++ b/FAQ.xml @@ -17,7 +17,7 @@ - PERFORMANCE OF THIS SOFTWARE. --> - +
Frequently Asked Questions about BIND 9 @@ -1064,9 +1064,11 @@ empty: - NSEC3 records are strictly meta data and can only be returned in - the authority section. This simplifies processing and removes - the paradox of a NSEC3 record proving it's own non-existance. + NSEC3 records are strictly meta data and can only be + returned in the authority section. This is done so that + signing the zone using NSEC3 records does not bring names + into existance that do not exist in the unsigned version + of the zone.