CISA Publishes Encrypted DNS Implementation Guidance to Federal Agencies

Summary:

The provided document is a guide on implementing Encrypted Domain Name System (DNS) to assist federal agencies in their zero-trust cybersecurity journey. The guide aims to help agencies progress further in their zero-trust security implementation by providing a high-level implementation checklist, phased implementation priorities, technical guidance, and references. The document is intended for federal agencies, but organizations of all kinds are encouraged to use it as a benchmark for advancing their own zero-trust efforts. The guide is based on the National Cybersecurity Strategy and the Office of Management and Budget Memorandum M-22-09, which calls for agencies to use the Cybersecurity and Infrastructure Security Agency (CISA)u2019s Protective DNS capability for egress DNS resolution.