Zone-signing is the process of cryptographically signing the authoritative data within a zone file. This process adds new records to the zone, which allows resolvers to verify the origin, authenticity and integrity of the DNS responses. .org, .орг, .机构, and .संगठन zones have been, and any future new gTLDs will be, NSEC3 (RFC 5155) signed.