Comment by bombcar

DNSSEC is more likely to self-DoS yourself than protect against an attack, unfortunately.