From DNSSEC-Tools
Jump to: navigation, search

Needs better explanation

The word "registrar" is missing, yet that's a vital link in the chain, without which there's no point signing anything (otherwise attackers who forge DNS won't get caught, because victims won't have any way to know you signed stuff when they encounter a MitM attack)