Make a Trust Chain: example (1/2) Child signed zone: child.sec.jinmei.org assume we already signed the zone Send the DS RR(s) to the parent "dsset-child.sec.jinmei.org." generated by dnssec-signzone