I do not know if this has been mentioned before, but here is a great project to check out if you are interested in DNS security https://dnscrypt.org

from the site,

DNSCrypt is a protocol that authenticates communications between a DNS client and a DNS resolver. It prevents DNS spoofing. It uses cryptographic signatures to verify that responses originate from the chosen DNS resolver and haven't been tampered with.

It is an open specification, with free and opensource reference implementations, and it is not affiliated with any company nor organization.