How does DNSSEC work?
DNSSEC uses cryptographic electronic signatures to determine the authenticity of data. DNS clients that are DNSSEC-enabled will validate any DNS response received by automatically checking the authenticity of the cryptographic signatures. If the signatures are missing or don’t match, the response is not validated and the DNS will not pass the false information on to the user.