As long as it’s signed in some form- dns is trivial to mitm (save for dnssec)