Skip to content

Security

ZSK

Abbreviation for Zone Signing Key

In short and in plain language

The ZSK is a key used to sign the records of a domain zone.

When domains are protected this way, the key is changed on a regular basis. This is called a rollover.

Mistakes during the change can stop domains from being found properly.

Definition
The ZSK is a key used to digitally sign the records of a domain zone. With DNSSEC it is exchanged regularly, which is called a rollover. Errors during the change can disrupt the resolution of domains.