That should be prevented by dnssec no?