I do not know if this has been mentioned before, but here is a great
project to check out if you are interested in DNS security
https://dnscrypt.org

from the site,

DNSCrypt is a protocol that authenticates communications between a DNS
> client and a DNS resolver. It prevents DNS spoofing. It uses cryptographic
> signatures to verify that responses originate from the chosen DNS resolver
> and haven't been tampered with.
>
> It is an open specification, with free and opensource reference
> implementations, and it is not affiliated with any company nor organization.
>