# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1394464099 -3600
# Node ID fae8b0661edfd82702dcd0802d763a8b592f0d32
# Parent  980b08cb4b1ffe57fcbef4c51413bdc4639f6257
Add info about _xmpp-server IN TLSA

diff -r 980b08cb4b1f -r fae8b0661edf mod_s2s_auth_dane.wiki
--- a/mod_s2s_auth_dane.wiki	Mon Mar 10 08:18:01 2014 +0000
+++ b/mod_s2s_auth_dane.wiki	Mon Mar 10 16:08:19 2014 +0100
@@ -8,6 +8,8 @@
 
 However it covers only outgoing server-to-server connections.
 
+For incoming connections, an experimental method is used, but requires another TLSA record.
+
 = Dependecies =
 
 This module requires a DNSSEC aware DNS resolver.  Prosodys internal DNS 
@@ -26,6 +28,14 @@
 }
 }}}
 
+= DNS Setup =
+
+{{{
+_xmpp-server._tcp IN SRV 0 0 5269 xmpp
+_5269._tcp.xmpp IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
+_xmpp-server IN TLSA 3 0 1 E3B0C44298FC1C149AFBF4C8996FB92427AE41E4649B934CA495991B7852B855
+}}}
+
 = Compatibility =
 
 Requires 0.9 or above.