With competent DNS providers, DNS can be authenticated very easily through DNSSEC. Whether other people bother to validate that authentication is a whole other problem, but enabling it really doesn't have to be all that hard.