DNS is the internet's "phone book". A hacker can hijack it and redirect traffic (DNS spoofing).
How DNSSEC protects
Every DNS record is digitally signed. Browsers verify authenticity.
How to enable
In your Sayt.uz cabinet open the domain → "DNSSEC" → enable. DS records auto-submit to the registry.
Limits
Some TLDs don't support DNSSEC. Check first.
Who needs it
Banks, e-commerce, government sites — must. Regular blog — optional.