---
id: "zsk"
kind: "glossary-term"
title: "ZSK"
language: "en"
category: "DNS and technical foundations"
updated: "2026-10-04T14:01:23Z"
canonical: "https://tldlog.com/glossary/zsk/"
translations:
  es: "https://tldlog.com/es/glosario/zsk/"
  de: "https://tldlog.com/de/glossar/zsk/"
  fr: "https://tldlog.com/fr/glossaire/zsk/"
  it: "https://tldlog.com/it/glossario/zsk/"
  pt-BR: "https://tldlog.com/pt/glossario/zsk/"
  ru: "https://tldlog.com/ru/glossariy/zsk/"
  zh-Hans: "https://tldlog.com/zh/cihui/zsk/"
---

# ZSK

Zone Signing Key

In DNSSEC, the key a zone uses to sign its ordinary records, such as address and mail records. It is usually smaller and changed more often than the KSK, and changing it does not involve the registry. Some zones use a single key for both jobs.

## related terms

- [KSK](https://tldlog.com/glossary/ksk/)
- [DNSKEY record](https://tldlog.com/glossary/dnskey-record/)
- [RRSIG](https://tldlog.com/glossary/rrsig/)
- [zone signing](https://tldlog.com/glossary/zone-signing/)
- [key rollover](https://tldlog.com/glossary/key-rollover/)