4 ms·

But how do I know which DNS servers to trust?

• kogir 15y ago
  The ones with signatures that check out. That's the SEC part of DNSSEC. The root key(s) are published and you can verify authenticity all the way down.