Delegated Signer (DS)

The Delegated Signer RR is part of the DNSSEC (DNSSEC.bis) standard. It appears at the point of delegation in the parent zone and contains a digest of the DNSKEY RR used as either a Zone Signing Key (ZSK) or a Key Signing Key (KSK). It is used to authenticate the chain of trust from the parent to the child zone. The DS RR is optionally created using the dnssec-signzone utility supplied with BIND.

One day real soon now™

Pro DNS and BIND by Ron Aitchison

Contents

tech info
guides home
dns articles
intro
contents
1 objectives
big picture
2 concepts
3 reverse map
4 dns types
quickstart
5 install bind
6 samples
reference
7 named.conf
8 dns records
operations
9 howtos
10 tools
11 trouble
programming
12 bind api's
security
13 dns security
bits & bytes
15 messages
resources
notes & tips
registration FAQ
dns resources
dns rfc's
change log