Key signing key: signs the DNSKEY records of a zone, and its public half is what parent zones' DS records and trust anchors point to.
Also called Key Signing Key.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains KSK in context, with comparison tables and the common traps.
Terms in this definition
- DNSKEY
In DNSSEC, the record type a signed zone uses to publish its public keys, for instance the KSK or ZSK.
Related terms
- ZSK
The zone signing key signs a zone's records under DNSSEC, while the key signing key signs the DNSKEY records themselves.