RFC 2065:Domain Name System Security Extensions
RFC-Ref

root


Click on the red underlined text to get to the source

... SIG RR owner name not counting the null label for root and not counting any initial "*" for a wildcard. If a secured retrieval is the result of wild card substitution, it is necessary ...
... class and TTL fields SHOULD be zero. To conserve space, the owner name SHOULD be root (a single zero octet). If transaction authentication ...


... A name (other than root) which is the head of a zone also appears as the leaf in a superzone. If both are secure, there will always be two different NXT ...


... While it might seem logical for everyone to start with the key for the root zone, this has problems. The logistics of updating every DNS resolver in the world when the root ...
... root zone, this has problems. The logistics of updating every DNS resolver in the world when the root key changes would be excessive. It may be some time before there even is a root key. ...
... DNS resolver in the world when the root key changes would be excessive. It may be some time before there even is a root key. Furthermore, many organizations will explicitly wish their "interior" DNS ...
... possible to retrieve signed keys for its subzones which have a key and, if the zone is not root, for its superzone. Every authoritative secure zone server MUST also include the KEY RR ...
... possible to climb the tree of zones if one starts below root. A secure sub-zone is indicated by a KEY RR with non-null key ...


... Root ...
... It should be noted that in DNS the root is a zone unto itself. Thus the root zone key ...
... DNS the root is a zone unto itself. Thus the root zone key should only be seen signing itself or signing ...
... signing RRs with names one level below root, such as .aq, .edu, or .arpa. Implementations MAY reject as bogus any purported root signature ...
... with names one level below root, such as .aq, .edu, or .arpa. Implementations MAY reject as bogus any purported root signature of records with a name more than one level below root ...
... root signature of records with a name more than one level below root. The root zone contains the root ...
... signature of records with a name more than one level below root. The root zone contains the root KEY RR ...
... root. The root zone contains the root KEY RR signed by a SIG RR ...
... RR signed by a SIG RR under the root key itself. ...



Google
Web
RFC-Ref