RFC 2065:Domain Name System Security Extensions
RFC-Ref

Reply Message


Click on the red underlined text to get to the source

... security belongs to the host composing the request or reply message, not to the zone involved. The corresponding public key is normally stored in and ...


... type. It is calculated by using a "data" (see Section 4.1.2) of the entire preceding DNS reply message, including DNS header but not the IP header ...



Google
Web
RFC-Ref