New answers tagged dnssec
Even with your own nameserver, you'd be either recursively pulling dns entries from elsewhere or doing your very own mitm zones, which is why dnssec is there. On a related note, looking at the osi model, you could also depend fully on ssl certs on the browser to ensure you don't get redirected to a phishing site of some sort, as a kind of L7 guarantee of ...
Cache poisoning by implementing cryptographic signatures for zone transfers. If you wish to encrypt payloads then use IPSec
Top 50 recent answers are included