Skip to content

Commit 70bc2a3

Browse files
Replace API example with APIRequest component version
1 parent 5d6b987 commit 70bc2a3

File tree

1 file changed

+12
-12
lines changed

1 file changed

+12
-12
lines changed

src/content/docs/dns/dnssec/enable-nsec3.mdx

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -6,24 +6,24 @@ sidebar:
66
order: 6
77
---
88

9+
import { APIRequest } from "~/components";
10+
911
As explained in [our blog](https://blog.cloudflare.com/black-lies/), Cloudflare's implementation of negative answers with NSEC is protected against zone walking[^1]. This implementation removes the need for NSEC3 and has been [proposed as an IETF standard](https://datatracker.ietf.org/doc/draft-ietf-dnsop-compact-denial-of-existence/).
1012

1113
However, if you must use NSEC3 for compliance reasons, you can enable it as explained below.
1214

1315
## Enable NSEC3
1416

15-
Use the [Edit DNSSEC Status endpoint](/api/resources/dns/subresources/dnssec/methods/edit/), setting `status` to `active` and `dnssec_use_nsec3` to `true`. You should replace the values started by `$` with your zone ID and API token. To learn more about using the Cloudflare API, refer to [Fundamentals](/fundamentals/api/get-started/).
16-
17-
```bash
18-
curl --request PATCH \
19-
https://api.cloudflare.com/client/v4/zones/$ZONE_ID/dnssec \
20-
--header "Authorization: Bearer $CLOUDFLARE_API_TOKEN" \
21-
--header "Content-Type: application/json" \
22-
--data '{
23-
"dnssec_use_nsec3": true,
24-
"status": "active"
25-
}'
26-
```
17+
Use the [Edit DNSSEC Status endpoint](/api/resources/dns/subresources/dnssec/methods/edit/), setting `status` to `active` and `dnssec_use_nsec3` to `true`. You should replace the values started by `$` with your zone ID and authentication credentials. To learn more about using the Cloudflare API, refer to [Fundamentals](/fundamentals/api/get-started/).
18+
19+
<APIRequest
20+
path="/zones/{zone_id}/dnssec"
21+
method="PATCH"
22+
json={{
23+
"dnssec_use_nsec3": true,
24+
"status": "active"
25+
}}
26+
/>
2727

2828
## Verify NSEC3 is in use
2929

0 commit comments

Comments
 (0)