middleware/dnssec

Add warning about in memory keys and the impossibilty to extract them.
This commit is contained in:
Miek Gieben 2016-08-14 07:30:41 -07:00
parent 3b7b9b49d5
commit e85a8260e3

View file

@ -19,6 +19,9 @@ RSA).
A signing key can be specified by using the `key` directive.
WARNING: when a key is generated there is currently no way to extract any key material from CoreDNS,
this key only lives in memory. See issue <https://github.com/miekg/coredns/issues/211>.
TODO(miek): think about key rollovers.