RFC 2065:Domain Name System Security Extensions
RFC-Ref

DNS tree


Click on the red underlined text to get to the source

... signatures. From there, it can securely read the public keys of other zones, if the intervening zones in the DNS tree are secure and their signed keys accessible. (It is in principle ...


... RR owner name. This will commonly be a host but could, in some parts of the DNS tree, be some other type of entity such as a telephone number ...


... If legitimate non-secure zones are encountered in traversing the DNS tree, then no zone can be trusted as secure that can be reached only via information from such non-secure zones. Since the non-secure ...


... believed by the authors to be secure at this time but high level zones in the DNS tree may wish to set a higher minimum, perhaps 1000 bits, for security ...



Google
Web
RFC-Ref