KSK, ZSK, RZM for the DNS

[James 6]

KSK = Key Signing Key
ZSK = Zone Signing Key
RZM = Root Zone Maintainer
DNS = Domain Name System (or Server)

The KSK will be used to sign the root zone for the first time on October 11, 2017 at 1600 UTC. The KSK is used to sign the ZSK, which is used by the root zone maintainer (RZM) to DNSSEC-sign the root zone of the Domain Name System. The change will upgrade the ZSK to a 2048-bit RSA key to improve security for resolving domain names.

For more information see https://automated-ksk-test.research.icann.org/

[James 6]

ICANN has postponed the rollout until the first quarter of 2018 at the earliest.