---
id: "cds-cdnskey"
kind: "glossary-term"
title: "CDS and CDNSKEY"
language: "en"
category: "DNS and technical foundations"
updated: "2026-10-04T14:01:23Z"
canonical: "https://tldlog.com/glossary/cds-cdnskey/"
translations:
  es: "https://tldlog.com/es/glosario/cds-cdnskey/"
  de: "https://tldlog.com/de/glossar/cds-cdnskey/"
  fr: "https://tldlog.com/fr/glossaire/cds-cdnskey/"
  it: "https://tldlog.com/it/glossario/cds-cdnskey/"
  pt-BR: "https://tldlog.com/pt/glossario/cds-cdnskey/"
  ru: "https://tldlog.com/ru/glossariy/cds-cdnskey/"
  zh-Hans: "https://tldlog.com/zh/cihui/cds-cdnskey/"
---

# CDS and CDNSKEY

Child DS and Child DNSKEY

Two DNS records that a domain's DNS operator publishes in the zone to tell the parent which DS record it wants. A registry or registrar that scans for them can turn on DNSSEC, change keys or turn it off without the owner copying data by hand.

## related terms

- [DS record](https://tldlog.com/glossary/ds-record/)
- [DNSKEY record](https://tldlog.com/glossary/dnskey-record/)
- [key rollover](https://tldlog.com/glossary/key-rollover/)
- [DNSSEC](https://tldlog.com/glossary/dnssec/)
- [chain of trust](https://tldlog.com/glossary/chain-of-trust/)