DS (Delegation Signer) records are used in DNSSEC to create a chain of trust. They contain a hash of a DNSKEY record from the child zone and are placed in the parent zone.