Archived Content
In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.NSA Releases Guidance on Encrypted DNS in Enterprise Environments
Last Revised
The National Security Agency (NSA) has released an information sheet with guidance on adopting encrypted Domain Name System (DNS) over Hypertext Transfer Protocol over Transport Layer Security (HTTPS), referred to as DNS over HTTPS (DoH). When configured appropriately, strong enterprise DNS controls can help prevent many initial access, command and control, and exfiltration techniques used by threat actors.
CISA encourages enterprise owners and administrators to review the NSA Info Sheet: Adopting Encrypted DNS in Enterprise Environments and consider implementing the recommendations to enhance DNS security.
This product is provided subject to this Notification and this Privacy & Use policy.