DNS Security Extensions (DNSSEC)

DNSSEC adds digital signatures to DNS records so that resolvers can check the answers are genuine and unaltered.

What is DNS Security Extensions (DNSSEC)?

It protects against spoofing and cache poisoning, using a chain of trust from the signed root zone. It does not encrypt queries.