The reason why SEP is used for the name of the flag (and thus DNSKEYs with that flag set) instead of KSK is because KSK implies an operational model that may or may not be in use.
Secure Entry Point is what the key *is*, Key Signing Key is what the key *does*.
That's very good distinction that clearly explains the name.
Johan
. dnsop resources:_____________________________________________________ web user interface: http://darkwing.uoregon.edu/~llynch/dnsop.html mhonarc archive: http://darkwing.uoregon.edu/~llynch/dnsop/index.html
