The KSK is an authentication key that corresponds to a private key used to sign one or more other signing keys. Typically, ...

The KSK is an authentication key that corresponds to a private key used to sign one or more other signing keys. Typically, the private key corresponding to a KSK will sign other keys used for signing the zone. A KSK may have a long validity period in order to provide a more stable secure entry point into the zone. The public key of a KSK is used as a trust anchor for validating DNS responses.