Glossary
DNSSEC
RRset
All records of the same name, class and type, treated as one unit. DNSSEC signs RRsets rather than individual records, which is why adding one record invalidates the signature over the whole set.
Defined in RFC 2181 §5.
Where this appears
The lessons that use this term, and what each is for.
Advanced Email TrustTLSA recordsRead a TLSA record field by field and say what a verifier will compare it against.Domain Security FundamentalsDNSKEY, RRSIG, DS and NSECIdentify each DNSSEC record type in a real answer and say what job it does.DNS Security PractitionerOne key or twoRead a zone’s DNSKEY set and say which signing arrangement it uses and why.DNS Security PractitionerNSEC enumerates your zoneWalk a zone using its own denial records, and say what that exposes.