Microsoft plans to lock down Windows DNS like never before. Here's how.
Briefly

Microsoft's ZTDNS framework offers encrypted and authenticated connections for end-user devices and allows administrators to restrict domains for DNS resolution, aiming to enhance security within Windows networks.
DNS security risks stem from the lack of encryption and the ability for end-user devices to be easily configured to use malicious lookup servers. ZTDNS seeks to balance encryption and authentication with the need for domain control and network visibility.
Read at Ars Technica
[
add
]
[
|
|
]