Jump to first page
 -49
Key / Zone Signing Keys
nOnly an administrative distinction, you cannot tell from the KEY record itself!
n
nDS points to a key signing key (KSK)
nThe zone is signed with a zone signing key (ZSK)
u(these keys may be the same)
n
nKey signing key may be long lived, and ÒbiggerÓ
nZone signing key may be short lived
ucan be ÒsmallerÓ = ÒfasterÓ