Signed RRset (RRSIG)

The RRSIG RR is part of the DNSSEC (DNSSEC.bis) standard. Each RRset in a signed zone will have an RRSIG RR containing a digest of the RRset created using a DNSKEY RR Zone Signing Key (ZSK). RRSIG RRs are unique in that they do not form RRsets - were this not so recursive signing would occur! RRSIG RRs are automatically created using the dnssec-signzone utility supplied with BIND.

One day real soon now™

Pro DNS and BIND by Ron Aitchison

Contents

tech info
guides home
dns articles
intro
contents
1 objectives
big picture
2 concepts
3 reverse map
4 dns types
quickstart
5 install bind
6 samples
reference
7 named.conf
8 dns records
operations
9 howtos
10 tools
11 trouble
programming
12 bind api's
security
13 dns security
bits & bytes
15 messages
resources
notes & tips
registration FAQ
dns resources
dns rfc's
change log