RFC 2065:Domain Name System Security Extensions
RFC-Ref

By the Server


Click on the red underlined text to get to the source

... Verification of the transaction SIG (which is signed by the server host key, not the zone key ...


... AD (authentic data) bit indicates in a response that the data included has been verified by the server providing it. The CD (checking disabled ...



Google
Web
RFC-Ref