[bracewel]

DNSSEC is enforced at the resolvers.

[AndyMcConachie]

Thanks. Since my zones are secured with DNSSEC that makes me feel a bit safer.