Even so, DNS resolution is only one aspect of securely speaking on the internet. DNSSEC isn't going to fully safe a site: SSL/TLS is especially suited to HTTP, as it can provide some defense even when just one aspect with the interaction is authenticated. This is the scenario with HTTP http://XXX