advancedGeneral
DNSSEC (DNS Security Extensions)
Cryptographic extensions that verify DNS records haven't been tampered with — protection against spoofing.
DNSSEC is a set of DNS extensions that add cryptographic signatures to DNS records, allowing resolvers to verify that DNS responses are authentic and haven't been tampered with. It protects against DNS cache poisoning and man-in-the-middle attacks. DNSSEC requires configuration at the registrar level (adding DS records) and at the DNS zone level. Adoption is growing but not yet universal.