Skip to main content
DNSSEC

Key signing key (KSK)

Definition, context, related terminology, and source references for Key signing key (KSK).

Definition

An operational role for a DNSKEY that primarily signs the DNSKEY RRset. A parent DS normally points to a KSK, though DNSSEC protocol flags do not fully enforce operational roles.