An extension of DNS that digitally signs responses. The recipient can thus verify that nobody has forged a record and redirected them to a fake server. It is switched on at the domain registrar, and the DNS provider must support it as well.
FAQ / Glossary