X-Git-Url: http://www.average.org/gitweb/?p=pdns-pipe-nmc.git;a=blobdiff_plain;f=SPEC.md;h=4a0fb4ac7fdf82a890821236345580353d9b828e;hp=a3254ee617a1bdd8a372ae9917ea2dc28780cebb;hb=414c9f928e12e0c240d55d79ff8360adc6b4d138;hpb=ad3d8d0ca9c8bc5d94d4ea533ebd23b35375a787 diff --git a/SPEC.md b/SPEC.md index a3254ee..4a0fb4a 100644 --- a/SPEC.md +++ b/SPEC.md @@ -319,11 +319,32 @@ the empty element of the `"map"` has been recursively merged into the current object. ``` -"map": { "www": { "alias" : "www.example.com." } +"map": { "www": { "alias" : "www.example.com" } , "www2": { "delegate": "d/example" } } ``` +Note: When a key contains dots ".", it is converted to a nested +map. If empty element appears as a result of split, such as when +a dot is at the beginning or at the end of the key, or there are +consequitive dots, such elemets are ignored. For example, + +``` +"map": { "www.uk": { "alias" : "www.example.co.uk" } + , "www..us": { "alias" : "www.example.com" } + , "smtp.us.": { "alias" : "smtp.example.com" } +``` + +is equivalent to + +``` +"map": { "uk": { "map": { "www": { "alias" : "www.example.co.uk" }}} + , "us": { "map": { "www": { "alias" : "www.example.com" } + , "smtp": { "alias" : "smtp.example.com" }} + } + } +``` + #### fingerprint attribute Does not translate into any DNS RR. Contains a list of TLS @@ -344,6 +365,20 @@ Intended to carry attributes as per } ``` +translates into: + +``` +_443._tcp TLSA (3 0 1 660008F9...7621B787) +_25._tcp TLSA (3 0 1 660008F9...7621B787) +``` + +The third element of the `TlsObj` heterogenous array is an extention +to the DANE definition. Value `0` means that this rule is not enforced +upon subdomains, value `1` means that it is enforced on subdomains. +Rule defined inside a subdomain `DomObj` that specifies `0` on a rule +existing in upper domain, that specifies `1` should be ignored. I.e. +subdomain rule cannot revoke enforcement imposed by an upper domain rule. + #### ds attribute Translates into `DS` RR. Carries attributes defined by