trust anchor

A public key that a DNSSEC-checking resolver (glossary)resolver The DNS server that looks up domain names on behalf of users. Full definition of resolver is set up to trust from the start, without needing proof from anywhere else. In practice this is the key of the root zone (glossary)root zone The top of the DNS, listing every TLD and its name servers. Full definition of root zone, published by IANA (glossary)IANA Internet Assigned Numbers Authority The functions that coordinate the root zone, IP addresses and protocol numbers. Full definition of IANA. Every DNSSEC (glossary)DNSSEC Domain Name System Security Extensions Digital signatures that prove DNS answers are genuine and unchanged. Full definition of DNSSEC check ends at this key, so resolvers must hold the current one.