DNSSEC (DNS Security Extensions)

Also written: DNSSEC, DNSSEC validation

An extension where domain owners sign their DNS records, so a validating resolver rejects forged answers. It is the real fix for DNS cache poisoning.

Where the book teaches it