DNS Security Extensions (DNSSEC) is an emerging internet security standard which enables domain names and IP addresses to be verified through digital signatures and public-key encryption. It's aimed at preventing domain name hijacking, whereby traffic can be redirected from a legitimate website to a fake one by hackers without the knowledge of end users.
Albeit, DNS Security Extensions require some implementation, as ISPs must need to configure their systems to support the new standard, domain owners have to ensure that their websites are digitally signed.
Google stated that it has commenced checking for digital signatures on DNSSEC formatted messages, and that if it cannot validate a domain name, it will return an error message. However, if the domain name that fails to validate is a popular domain, it may exclude the site from blacklisting until fixed.
Additional information are available on Google's technical pages, particularly on DNSSEC support and security pages.
Sign up here with your email