DNSKEY Record ensures the validation by implementing a pair of Signature Keys to verifythat the addresses come from a legitimate source. Let’s say your ID gets stolen: a good impersonator can still book a flight and validate a boarding pass, but biometric control at security will scan face or fingerprints (Signature Keys) and detect that it does not match the legitimate owner’s.