%% You should probably cite rfc3757 instead of this I-D. @techreport{ietf-dnsext-keyrr-key-signing-flag-12, number = {draft-ietf-dnsext-keyrr-key-signing-flag-12}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-dnsext-keyrr-key-signing-flag/12/}, author = {Jacob Schlyter and Olaf Kolkman and Edward P. Lewis}, title = {{Domain Name System KEY (DNSKEY) Resource Record (RR) Secure Entry Point (SEP) Flag}}, pagetotal = 8, year = 2003, month = dec, day = 18, abstract = {With the Delegation Signer (DS) resource record (RR), the concept of a public key acting as a secure entry point (SEP) has been introduced. During exchanges of public keys with the parent there is a need to differentiate SEP keys from other public keys in the Domain Name System KEY (DNSKEY) resource record set. A flag bit in the DNSKEY RR is defined to indicate that DNSKEY is to be used as a SEP. The flag bit is intended to assist in operational procedures to correctly generate DS resource records, or to indicate what DNSKEYs are intended for static configuration. The flag bit is not to be used in the DNS verification protocol. This document updates RFC 2535 and RFC 3755. {[}STANDARDS-TRACK{]}}, }