DNSSEC

DNS extensions that cryptographically verify the authenticity and integrity of DNS answers.

In plain words

DNSSEC adds digital signatures to DNS records so answers cannot be tampered with.

Practical example

With DNSSEC enabled, the resolver verifies the record signature and discards forged answers.

Where you encounter it

When hardening domain security and protecting against DNS spoofing.