DNSSEC: What It Protects and What It Does Not
The aim is to connect the technology with everyday operational decisions. DNSSEC adds cryptographic validation to DNS responses so resolvers can verify that signed DNS data has not been altered in transit.