Technical dictionary
DNSSEC
DNS Security Extensions—signed DNS data for authenticity, not general traffic encryption.
Definition
DNSSEC uses public-key signatures so resolvers can validate DNS answers. It protects integrity/authenticity of zone data.
Zone-signing keys are classical PKI objects today. Separately, DoH/DoT encrypt DNS transport.