DNSSEC

DNSSEC (Domain Name System Security Extensions) cryptographically signs your DNS records so a resolver can prove an answer really came from you and wasn't swapped out by an attacker (DNS spoofing / cache poisoning). You enable it at your DNS provider and add a matching DS record at your domain registrar.