Resolver Key Identified DNS Query
CNNIC
DNSSEC hardens the DNS between the root server and the recursive resolver. It does not secure the communications between the stub resolver and the recursive resolver. This document specifies the mechanism which deals with securing the communications between them.