Offline signing

Definition

A model in which zone data is signed outside the serving authoritative server, then transferred or published as a signed zone. It can isolate private keys but adds publication and freshness complexity.