RFC 4033:DNS Security Introduction and Requirement...
RFC-Ref

architecture


Click on the red underlined text to get to the source

... DNSSEC architecture has to take stub resolvers into account, but the security features needed in a stub resolver differ in some respects ...



Google
Web
RFC-Ref