DNSSECの仕組み

A Gentle Introduction to DNSSEC DNSSEC creates a secure domain name system by adding cryptographic signatures to existing DNS records. These digital signatures are stored in DNS name servers alongside common record types like A, AAAA, MX, CNAME, etc. By checking its associated signature, you can verify that a requested DNS record comes from its authoritative name server and wasn’t altered en-route

[tzccinct]

RRsets, ルート署名セレモニー(Root Signing Ceremony)。