&gt; If that is true, and that is what I would expect, and we&#x27;ve minimized the risk of cache poisoning by using a localhost cache exlcusively (no third party caches), then why use DNSSEC?<p>How have you authenticated that your ISP isn&#x27;t intercepting DNS requests and serving them out of their own cache that lies?