When you type a domain name into your browser, you trust that the answer you get back is real. The original DNS had no way to prove it. DNSSEC fixes that....