James

KSK, ZSK, RZM for the DNS

Recommended Posts

James    6

KSK = Key Signing Key
ZSK = Zone Signing Key
RZM = Root Zone Maintainer
DNS = Domain Name System (or Server)

The KSK will be used to sign the root zone for the first time on October 11, 2017 at 1600 UTC. The KSK is used to sign the ZSK, which is used by the root zone maintainer (RZM) to DNSSEC-sign the root zone of the Domain Name System. The change will upgrade the ZSK to a 2048-bit RSA key to improve security for resolving domain names.

For more information see https://automated-ksk-test.research.icann.org/

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now