nTSIG (RFC 2845)
uauthorizing dynamic updates & zone
transfers
uauthentication of caching forwarders
ucan be used without deploying other features of DNSSEC
nOne-way hash function over:
uDNS question or answer
u& the timestamp
nSigned with Òshared secretÓ key
nUsed in server configuration, not in zone file