DNS Security Extensions (DNSSEC) adds an extra layer of authentication to DNS, ensuring requests are not routed to a spoofed domain.
For additional background on DNSSEC, visit the Cloudflare Learning Center ↗︎.
When you enable DNSSEC, Cloudflare signs your zone, publishes your public signing keys, and generates your DS record.