Watch this video on YouTube
What is a set of DNS extensions that offer origin authentication, authenticated denial of existence, and data integrity to DNS clients (resolvers), while not ensuring availability or confidentiality?