June 2018
Intermediate to advanced
368 pages
11h 1m
English
There is no parent zone to the "." internet root.
The "." root then needs to be signed and authenticated by a KSK in a secure way, as it terminates (or originates) all trust chains for the entire DNS tree.
This is accomplished by splitting the KSK into pieces. First, there are two redundant datacenter locations where the root keys are kept, currently on the east coast and west coast of the US; and then there are seven trusted individuals, called Trusted Community Representatives or TCRs, within the naming community assigned to each location.
A minimum of three is required to undertake a key signing. Look at this diagram:
At designated intervals, ...
Read now
Unlock full access