Having said that, DNS resolution is only one facet of securely communicating over the internet. DNSSEC won't fully safe a website: SSL/TLS is very suited to HTTP, because it can provide some security regardless of whether just one aspect of the interaction is authenticated. This is actually the case with http://XXX