Device and method for resolving domain names

A method for resolving domain names, where a name server is configured to receive a query for a domain name system (DNS) record from a stub resolver, where a public key or certificate held by the stub resolver matches a private key of the name server. The name server runs the query for a DNS record by executing code in a trusted execution environment. Instead of recursively resolving the query for a DNS record as is common practice, the name server reads the DNS record corresponding to the query from a ledger. At last the name server prepares an authenticated response to the stub resolver by authenticating the response comprising the read DNS record with its private key, wherein the private/public key pair or alternatively private key and matching certificate are protected and distributed with the at least another name server via the common ledger.