A protocol that allows X.509 certificates to be bound to DNS names using DNSSEC, enhancing email security.