Skip to content

Commit 3f9ccd4

Browse files
Add note on pre-signed DNSSEC to NSEC3 docs
1 parent 2a8531c commit 3f9ccd4

File tree

1 file changed

+6
-0
lines changed

1 file changed

+6
-0
lines changed

src/content/docs/dns/dnssec/enable-nsec3.mdx

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,12 @@ Use the [Edit DNSSEC Status endpoint](/api/resources/dns/subresources/dnssec/met
2525
}}
2626
/>
2727

28+
### Pre-signed DNSSEC
29+
30+
If you use Cloudflare as a secondary DNS provider with [pre-signed DNSSEC](/dns/zone-setups/zone-transfers/cloudflare-as-secondary/dnssec-for-secondary/), setting `dnssec_use_nsec3` to `true` means that Cloudflare will use NSEC3 records as transferred in from your primary DNS provider.
31+
32+
Otherwise, NSEC3 records will be generated and signed at request time.
33+
2834
## Verify NSEC3 is in use
2935

3036
To validate that NSEC3 is being used, consider the following scenarios:

0 commit comments

Comments
 (0)