A few conceptual question about dnssec.

[dE .]

On 02/18/12 22:14, Axel Rau wrote:
> Am 18.02.2012 um 17:35 schrieb dE .:
>
>> The DS record is a signature right?
> No its the hash of a DNSKEY (KSK) in the child zone. The DS is signed with a RRSIG.
>
> Axel
> ---
> PGP-Key:29E99DD6  ☀ +49 151 2300 9283  ☀ computing @ chaos claudius
>

Thanks for the clarification.