DNSSEC – Domain Name System Security Extensions
(DNSSEC) allow registrants to digitally sign information they put into the Domain Name System (DNS). This protects consumers by ensuring DNS data that has been corrupted, either accidentally or maliciously, doesn’t reach them.
Two sides of DNSSEC must be enabled for it to work;
1) Registrants, who are responsible for publishing DNS information, must ensure their DNS data is DNSSEC–signed.
2) Network operators need to enable DNSSEC validation on their resolvers that handle DNS lookups for users.