Jump to first page
-
120
DS RRs for delegation.
n
Parent is authoritative for the DS record
u
It may not appear in the child's apex
n
Simplifies KEY exchange
n
Eases resigning
u
parent can sign often
short signature lifetime
shorter impact time when key gets compromised