What DNSSEC cannot do
DNSSEC:

What DNSSEC can do
Domain Name Security Extensions (DNSSEC) add a layer of security to your domain names by attaching digital signatures to their Domain Name System (DNS) information. The DNSSEC extensions are used to verify data by means of cryptographically secured signatures.
DNSSEC offers:
dot-ca-registry.ca is pleased to announce that they have successfully completed certification by CIRA to process your DNSSEC requirements for all .ca domains