DNSSEC-Tools being migrated -- expect broken links.
The process to convert older wiki pages to our new site is not yet complete; please be patient while we work through the moving process. -- 2018-08-11


A DNSKEY is a DNS Resource Record that contains the crypographic keys used to sign records in a zonefile. In particular, they can be either a KSK or a ZSK in type. When a DNSKEY is used to sign a domain resource record set, the resulting signature is stored in a RRSIG record at that domain name.