**Source port randomization** — Using random source ports for DNS queries exponentially increases the difficulty of guessing the correct transaction ID + port combination. - **DNSSEC** — Digitally signs DNS records, allowing resolvers to verify their authenticity. - **DNS-over-HTTPS (DoH) and DNS-ov