SEP keys do not have a parent!
Sep keys are the secure entry points into a _zone_. Not the secure entry points into the DNS (although sometimes a
secure entry point into a zone is also a secure entry point into the DNS, that is when a SEP key is configured as trust anchor.)
The definition is subtle, see RFC3757.
Sorry, then I used the wrong term (seems to me that SEP vs KSK wasn't a step forward, but whatever). My objection should have been:
This doesn't say anything about trust anchors, though. .
Cheers,
Ben. . dnsop resources:_____________________________________________________ web user interface: http://darkwing.uoregon.edu/~llynch/dnsop.html mhonarc archive: http://darkwing.uoregon.edu/~llynch/dnsop/index.html
