DNSSEC adds cryptographic signatures to DNSThe system that translates domain names into the technical addresses of servers. More. It helps verify that an answer really comes from the authoritative source and was not changed on the way. It does not encrypt the query itself and does not solve every DNSThe system that translates domain names into the technical addresses of servers. More risk, but it helps against some response-spoofing attacks.
