DNS system is currently facing many security threats. This paper firstly introduces two major DNS security solutions: DNSSEC and DNSCurve, then conducts a thorough and detailed comparison, finally draws some conclusions which are that DNSCurve cannot substitute DNSSEC but can supplement it, and afterwards makes a proposal which is to deploy DNSCurve as a supplement after the deployment of DNSSEC.