summaryrefslogtreecommitdiff
path: root/dns/dnssec-rr/pkg-descr
diff options
context:
space:
mode:
Diffstat (limited to 'dns/dnssec-rr/pkg-descr')
-rw-r--r--dns/dnssec-rr/pkg-descr9
1 files changed, 9 insertions, 0 deletions
diff --git a/dns/dnssec-rr/pkg-descr b/dns/dnssec-rr/pkg-descr
new file mode 100644
index 000000000000..ff114db05955
--- /dev/null
+++ b/dns/dnssec-rr/pkg-descr
@@ -0,0 +1,9 @@
+A set of tools for working with DNSSEC, using BearSSL for cryptography.
+
+- dnskey: generate DNSKEY records from private keys
+- ds: generate DS records for parent zones
+- nsec: generate NSEC records for zones
+- rrsig: sign records in zones, generating RRSIG records
+- tlsa: generate DANE TLSA records for certificates
+
+See also https://mforney.org/blog/2020-05-21-securing-your-zone-with-dnssec-and-dane.html