CDS and CDNSKEY

Two DNS records (glossary)DNS record One entry in a DNS zone, made of a name, a type, a TTL and data. Full definition of DNS record that a domain's DNS operator (glossary)DNS provider A company that runs the name servers for a domain, which may differ from the registrar. Full definition of DNS provider publishes in the zone to tell the parent which DS record (glossary)DS record Delegation Signer A record in the parent zone that links a domain's DNSSEC key to the chain of trust. Full definition of DS record it wants. A registry (glossary)registry The central database and system of a top-level domain, or loosely the organization that runs it. Full definition of registry or registrar (glossary)registrar A company that registers domain names for customers with the registry. Full definition of registrar that scans for them can turn on DNSSEC (glossary)DNSSEC Domain Name System Security Extensions Digital signatures that prove DNS answers are genuine and unchanged. Full definition of DNSSEC, change keys or turn it off without the owner copying data by hand.