DNSSEC adds the security to DNS that it desperately needs. It is a chain of trust that guarantees that the data (DNS records) were not modified on the way and that they come from the right source.
What is DNSSEC?
DNSSEC is a set of security measures that protect DNS data by providing cryptographic authentication, authenticated denial of existence, and data integrity.
DNSSEC basically proves that the data came from the right source, stops data that can’t prove the right source, and data that was modified on the way.