What is DNSSEC?
If DNS is the phone book of the Internet, DNSSEC is the protocol that ensures that a number in the phone book actually belongs to the contact listed. DNSSEC uses cryptographic signatures to verify that the DNS records returned for a domain are untampered.
What are the steps to enable DNSSEC?
There are two steps to enabling DNSSEC. After you enable DNSSEC at CloudFlare, you need to also add a DNS record called a DS to your registrar. The DS helps DNS resolvers verify the public key used to sign your DNS records.
How do I test that DNSSEC is working on my website?
Use http://dnsviz.net/d/siambit.tv/dnssec/ to see if DNSSEC is working.