What are the two keys that must be generated if you want to secure a zone with a digital signature? What is the purpose of each?

What will be an ideal response?


A key-signing key and a Zone-signing key must be generated. A key-signing key (KSK) has a private and public key associated with it. The private key is used to sign all DNSKEY records, and the public key is used as a trust anchor for validating DNS responses. A zone-signing key (ZSK) is a public and private key combination stored in a certificate used to sign the zone. The KSK is used to sign the ZSK to validate it.

Computer Science & Information Technology

You might also like to view...

This OSI layer establishes, manages and terminates sessions.

What will be an ideal response?

Computer Science & Information Technology

Explain how the F_DUPFD_CLOEXEC fcntl command might be useful.

What will be an ideal response?

Computer Science & Information Technology

Try blocks contain code that could possibly:

(a) handle an exception (b) throw an exception (c) catch an exception (d) display an exception

Computer Science & Information Technology

A machine language program is called the ____ program.

A. source B. object C. data D. virtual

Computer Science & Information Technology