DomainDNSSEC

The DNSSEC section a domain publishes: its DS and DNSKEY record sets and, when the registry reports one, the maximum signature lifetime.

  • object
    Type: string

    Resource type identifier

  • max_sig_life
    Type: integer

    RFC 5910 maxSigLife in seconds: the registry's signature lifetime for the whole section. Omitted when the registry reports none.

  • ds_records
    Type: array of DomainDS

    RFC 5910 DS records currently published. Empty on an unsigned name and on one whose registry runs the key data interface.

    Properties: 7
  • key_records
    Type: array of DomainKeyRecord

    RFC 5910 DNSKEY records currently published, for a registry running the key data interface. Empty on an unsigned name and on one whose registry runs the DS data interface.

    Properties: 6