DNS KEY (DNSKEY)

The DNSKEY RR is part of the DNSSEC (DNSSEC.bis) standard. DNSKEY RRs contain the public key (of an asymmetric encryption algorithm) used in zone signing operations. Public keys used for other functions are defined using a KEY RR. DNSKEY RRs may be either a Zone Signing Key (ZSK) or a Key Signing Key (KSK). The DNSKEY RR is created using the dnssec-keygen utility supplied with BIND.

One day real soon now™