DNSSEC Information

AC.ZA supports DNSSEC and is fully signed. We encourage Registrants to publish DNSSEC trust anchors.

AC.ZA DNSSEC Policy & Practice Statement Framework

The AC.ZA DNSSEC Policy & Practice Statement Framework (DPS), provides the parties involved with a statement of security practices and provisions that are applied with respect to DNSSEC in the AC.ZA zone.

The current version of the DPS is 20190903.

DPS v20190903 (PDF)

Trust Anchors (KSK)

As at 2019/09/03, the following key signing key(s) are used to sign the AC.ZA zone:

Key Tag11186
Key Length2048 bit
Algorithm8 (RSA/SHA-256)
Digest Type2 (SHA-256)
Digest5DA417C8E14351274ED55902268E4B288B22966EC4DDC14A27C7A043CEE90F7A

Where the information on this page contradicts the DS records published in the parent (ZA) zone by ZADNA , the DS records should always prevail.