KSK

In DNSSEC (glossary)DNSSEC Domain Name System Security Extensions Digital signatures that prove DNS answers are genuine and unchanged. Full definition of DNSSEC, the key a zone uses only to sign its own set of keys. A fingerprint of it is placed in the parent zone as the DS record (glossary)DS record Delegation Signer A record in the parent zone that links a domain's DNSSEC key to the chain of trust. Full definition of DS record, so changing it involves the registry (glossary)registry The central database and system of a top-level domain, or loosely the organization that runs it. Full definition of registry. The root zone (glossary)root zone The top of the DNS, listing every TLD and its name servers. Full definition of root zone's KSK is the starting point of trust for the whole system.