DNSSEC Mechanisms to
Establish Authenticity and
Integrity of Data
=>
Quick overview
n
New RRs
n
Using public key cryptography to sign a
single zone
n
Delegating signing authority ; building chains
of trust
n
Key exchange and rollovers