ZSK

In DNSSEC (glossary)DNSSEC Domain Name System Security Extensions Digital signatures that prove DNS answers are genuine and unchanged. Full definition of DNSSEC, the key a zone uses to sign its ordinary records, such as address and mail records. It is usually smaller and changed more often than the KSK (glossary)KSK Key Signing Key The DNSSEC key that signs a zone's key set and is referenced by the parent zone. Full definition of KSK, and changing it does not involve the registry (glossary)registry The central database and system of a top-level domain, or loosely the organization that runs it. Full definition of registry. Some zones use a single key for both jobs.