[Opendnssec-develop] KSK vs ZSK

[Matthijs Mekking]

I think general discussion

Jakob Schlyter wrote:
> hi,
>=20
> john, jelte and I just had an interesting discussion on jabber.
>=20
> a KSK is a key that signs all DNSKEY RRset. we all agree on that.
> but does a ZSK sign all RRSETs or all non-DNSKEY RRsets? if so, a key
> can be both a KSK and a ZSK.
>=20
>=20
> so, dear list, please advice!
>=20
>     jakob
>=20
> _______________________________________________
> Opendnssec-develop mailing list
> Opendnssec-develop at lists.opendnssec.org
> https://lists.opendnssec.org/mailman/listinfo/opendnssec-develop


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 544 bytes
Desc: OpenPGP digital signature
URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20090305/898b5684/attachment.bin>