RFC 2065:Domain Name System Security Extensions
RFC-Ref

public keys


Click on the red underlined text to get to the source

... DNS responses, and file representation. These resource records represent the public keys of entities named in the DNS and are used for key distribution ...


... authenticate signatures. From there, it can securely read the public keys of other zones, if the intervening zones in the DNS tree are secure and their signed keys ...
... are secure and their signed keys accessible. (It is in principle more secure to have the resolver manually configured with the public keys of multiple zones, since then the compromise of a single zone would not permit the faking of information from other zones. It is also more administratively cumbersome, however, particularly when ...
... would not permit the faking of information from other zones. It is also more administratively cumbersome, however, particularly when public keys change.) ...


... Domain Name System (DNS) name. It will be a public key as only public keys are stored in the DNS. This can be the public key ...


... (DNS) involves starting with one or more trusted public keys for one or more zones. With trusted keys, a resolver willing to perform cryptography ...
... secure DNS zone structure to the zone of interest as described in Section 6.3. Such trusted public keys would normally be configured in a manner similar to that described in Section 6.2. However, as a practical matter, a security ...



Google
Web
RFC-Ref