DNSSEC allows websites to verify their domain names using digital signatures and public-key encryption. DNS Security Extensions (DNSSEC) prevents Kaminsky-style attacks, where traffic is redirected from a legitimate website to a fake one without the website operator or end user knowing. More than 25 domains — including.gov,.org,.edu,.edu and.net — have enabled DNSSec since July 2010. The Internet’s root servers at the top of the DNS hierarchy added DNSEC support in July 2010.”]