DNS, by default it is not safe. Its purpose is to be able to provide a decentralized model for domain resolution and to do it fast because there are billions of people online always. Yes, the focus of the DNS is not safety. But there is a strong need for it, so here comes the DNSSEC. The DNSSEC is the security extension that gives us a good level of protection.
What is DNSSEC?
DNSSEC (Domain Name System Security Extensions) is an extension, on top of the DNS, that encrypts the DNS records that we use to communicate with the name servers. That way, even if somebody intercepts those DNS records, they will be encrypted and unreadable to them. So the cybercriminals will be with pointless random text in their hands.
DNSSEC provides security to the DNS in a simple and effective way.