DNSSEC

Follow the chain of trust end to end: the delegation at your registrar, the keys, the signatures, and what public resolvers make of them.