aboutsummaryrefslogtreecommitdiff
path: root/middleware
diff options
context:
space:
mode:
Diffstat (limited to 'middleware')
-rw-r--r--middleware/dnssec/README.md3
1 files changed, 3 insertions, 0 deletions
diff --git a/middleware/dnssec/README.md b/middleware/dnssec/README.md
index df00866cf..34d5680c0 100644
--- a/middleware/dnssec/README.md
+++ b/middleware/dnssec/README.md
@@ -19,6 +19,9 @@ RSA).
A signing key can be specified by using the `key` directive.
+WARNING: when a key is generated there is currently no way to extract any key material from CoreDNS,
+this key only lives in memory. See issue <https://github.com/miekg/coredns/issues/211>.
+
TODO(miek): think about key rollovers.