RFC 2065:Domain Name System Security Extensions
RFC-Ref

data origin authentication


Click on the red underlined text to get to the source

... Section 2 provides an overview of the extensions and the key distribution, data origin authentication, and transaction and request security ...


... services: key distribution as described in Section 2.2 below, data origin authentication as described in Section 2.3 below, and transaction and request authentication ...
... Data Origin Authentication and Integrity ...
... This data origin authentication key belongs to the zone and not to the servers that store copies of the data. That means compromise of a server or even all servers for a zone will not necessarily affect ...
... Adding data origin authentication and integrity requires no change to the "on-the-wire" DNS ...
... The data origin authentication service described above protects retrieved resource records ...


... what real names exist in the zone. This protection from pseudo-zone transfers is bought at the expense of eliminating the data origin authentication of the non-existence of names that NXT RRs can ...



Google
Web
RFC-Ref