‘Prove you understand DNSSEC delegation first,’ says the .COM TLD.

Solve this riddle:

My cryptographic hint ensures each child inherits trust, placed in a parent’s zone so illusions are robust. I link the chain from top to domain beneath. Without me, child claims remain an unverified wreath. Who am I?

Sorted out the DS record riddle DS record for dnsimple.com NS record for dnsimple.com