debops.unbound

Unbound is a local DNS resolver. It supports DNSSEC validation and can be used to ensure that DNS queries protected by DNSSEC are signed by the correct DNS root zone key, verified locally.