What is DNSSEC?

In theory, a DNS without DNSSEC can be manipulated through so-called cache poisoning or man-in-the-middle attacks. By activating DNSSEC you make sure that this at least cannot happen to your domain.

This extension to the DNS protocol therefore makes using DNS and domain names a lot more secure.

To prevent these types of attacks, DNSSEC links the answer to a DNS query to a digital signature. This makes it possible to check whether the information a DNS server sends really comes from the right DNS server. To achieve this, the DNS servers are equipped with a system of asymmetric cryptography, also known as public-key cryptography. The DNS information is signed with a private key, just as when a website is secured with a certificate. Users with a public key can then verify that the information sent is correct and that there are no problems with it.

Click here for an explanation of how to activate DNSSEC

Perhaps worth a read: The history of the Domain Name