Glossary
DNSSEC
Trust anchor
A key a validator trusts without proof — in practice the root zone key-signing key, distributed with the resolver. Every DNSSEC validation chains back to it.
Defined in RFC 4033 §2.
Where this appears
The lessons that use this term, and what each is for.
Advanced Email TrustThe dependency that decides availabilityDetermine from DNS alone whether DANE is even possible for a given domain.Domain Security FundamentalsWalking the chain of trustFollow a chain from the root to a zone and confirm each link yourself.DNS Security PractitionerThe rollover that breaks delegationsPerform a KSK rollover in an order that never leaves the parent pointing at nothing.