diff --git a/README.md b/README.md
index 3928ac1..8fa7d1b 100644
--- a/README.md
+++ b/README.md
@@ -9,6 +9,8 @@ OpenDKIM is used for signing paired with spamassassin for mail filtering
 
 - Appropriate DNS records [(SPF, PTR, DKIM, DMARC)](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/mailpass.webp) implemented for authentic, trusted and reliable mail. Full report available [here](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/full_report.txt)
 
+- DNSSEC enabled for Postfix allowing validated MX lookups, with DNSSEC additionally configured for the server's domain to protect the [integrity of record resolution](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/dnssec.png)
+
 - Strong encryption with AES-128-GCM and [secure mail transmission with TLS 1.3](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/tls.webp)
 
 - Mail deliverable to the most prolific service proivders, such as [Microsoft, Google and Yahoo](https://git.tobiastime.xyz/Tobias/Mail-Server/raw/branch/main/images/mail_delivered.jpg)