Domain Name System Security Extensions is designed to authenticate the origin of DNS data used on Internet protocol networks by digitally signing it. CloudFlare, which offers services that defend against DNS and distributed-denial-of-service attacks, announced that for all of the 2 million websites it supports, it will now enable DNSSEC. Some security experts see it as crucial technology for blocking DNS amplification DDoS attacks, others disagree, saying it can actually be abused by attackers to fuel amplification attacks.”]
Source: https://www.databreachtoday.com/secure-domains-dns-security-debate-a-7927