NSA Releases Guidance on Encrypted DNS in Enterprise Environments

The National Security Agency (NSA) has released an information sheet with guidance for enterprise network owners and administrators on adopting encrypted Domain Name System (DNS) over Hypertext Transfer Protocol over Transport Layer Security (HTTPS), referred to as DNS over HTTPS (DoH). When configured appropriately, strong enterprise DNS controls can help prevent many initial access, command and control, and exfiltration techniques used by threat actors. Access the guidance at the NSA.