Domain Name System Security Extensions
DNSSEC adds digital signatures to DNS records so resolvers can verify that responses are authentic and unmodified. It defends against cache poisoning and spoofing attacks that redirect users to malicious sites. It provides authenticity and integrity for DNS data but does not encrypt queries.