The DNS security extensions are described in RFC 2535. You could also take a look at Cricket Liu's presentation. It's available at acmebw.com/papers/dnssec.pdf - Erik Andersen