ZSK means Zone Signing Key. In DNSSEC it signs DNS zone records, while the KSK signs the ZSK. ← Full glossary