DNSSEC (Domain Name System Security Extensions) adds cryptographic verification to DNS responses. It helps protect users against certain attacks in which fraudulent DNS information is used to redirect traffic to an incorrect server.