DNSSEC
Also: DS record
A set of DNS extensions that let a resolver verify a record cryptographically, signalled in the registry zone by a delegation-signer record.
Adoption is 5.0% of domains across the covered zones and ranges from 0% to 100% by registry — 14.1% in .dev, 5.5% in .net, 0.9% in .bond. A missing DS record therefore means very different things in different TLDs.