I take it Rickard mean a RRSIG over DNSKEY (by KSK) or RRSIG over anything-else (by ZSK). Yes -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.opendnssec.org/pipermail/opendnssec-develop/attachments/20100315/4f5bdf60/attachment.htm>