Microsoft has enabled DNS over HTTPS for Windows Server, adding encrypted name resolution to enterprise networks. The update strengthens zero-trust security by blocking unauthorized inspection and spoofing of DNS traffic.
New security feature blocks unauthorized inspection of enterprise network traffic
The feature ships with the latest Patch Tuesday updates for Windows Server 2025. Administrators can enable this feature on current systems without requiring a full OS reinstall.
DNS over HTTPS wraps standard queries in TLS encryption, which prevents man-in-the-middle attacks and certificate spoofing. The implementation runs alongside traditional DNS protocols to maintain backward compatibility during transition periods.
Microsoft designed the feature to integrate with current server architecture rather than replace core components. This enables organizations to implement secure DNS resolution while maintaining current operational processes.
The update targets organizations that require stronger authentication for outbound name lookups. Encrypted communication between Windows DNS Server and upstream resolvers remains a future plan, not yet implemented.
Discussion
0 comments
Log in to join the thread with a thoughtful take, question, or correction.