resource record
Click on the red underlined text to get to the source
... The DNS Security Extensions (DNSSEC) are a collection of new resource
records and protocol modifications that add data origin
authentication and data integrity to the DNS ...
... [RFC4034] defines the DNSSEC resource records.
The reader is also assumed to be familiar with the basic DNS ...
... DNSSEC requires a change to the definition of the CNAME resource
record ([RFC1035]). Section 2.5 changes the CNAME RR ...
... delegation point NS RRset MUST have an NSEC resource record. The
format of NSEC RRs and the process for constructing the NSEC RR ...
... name servers.
The type bitmap of every NSEC resource record in a signed zone MUST
indicate the presence of both the NSEC record itself and its
...
... Changes to the CNAME Resource Record ...
... this conflict, this specification modifies the definition of the
CNAME resource record to allow it to coexist with NSEC and RRSIG RRs.
...
... These rules only apply to responses where the semantics convey
information about the presence or absence of resource records. That
is, these rules are not intended to rule out responses such as RCODE
...
...
The DS resource record type is unusual in that it appears only on the
parent zone's side of a zone cut. For example, the DS RRset ...
... DNSKEY, NSEC, and DS resource records, but these
records have no special meaning with respect to a zone transfer
operation.
...
... DNS security extensions use public
key cryptography to sign and authenticate DNS resource record sets.
Please see [RFC4033] for terminology and general security
considerations ...
... RFC4034] for considerations
specific to the DNSSEC resource record types.
An active attacker ...
... Arends, R., Austein, R., Larson, M., Massey, D., and S. Rose, "Resource Records for DNS Security Extensions", RFC 4034prop, March 2005. ...