A Security Practitioner's Guide to Encrypted DNS
A Security Practitioner's Guide to Encrypted DNS Best practices for a shifting visibility landscape. The Domain Name System, or DNS, is the Internet's directory system. It points you where you want to go, mapping human-readable names like darkreading.com to machine-routable addresses such as 104.17.120.99. The original DNS protocol, however, is fundamentally insecure. Among other issues, the cleartext nature of the DNS protocol means that attackers with network access can intercept DNS queries to spy on your activity or forge responses to send you to a site where you don't want to go, such a...
Source: darkreading.com