A few conceptual question about dnssec.

[Axel Rau]

Am 18.02.2012 um 17:35 schrieb dE .:

> The DS record is a signature right?
No its the hash of a DNSKEY (KSK) in the child zone. The DS is signed with a RRSIG.

Axel
---
PGP-Key:29E99DD6  ☀ +49 151 2300 9283  ☀ computing @ chaos claudius