https://microsegment.io/tags/dns/ Recent content in Dns on microsegment.io Hugo en-us Tue, 10 Nov 2026 00:00:00 +0000 https://microsegment.io/post/2026-11-10-dns-allowlist-is-not-workload-containment/ Tue, 10 Nov 2026 00:00:00 +0000 https://microsegment.io/post/2026-11-10-dns-allowlist-is-not-workload-containment/ <p>The server can resolve only approved names. Can it still connect to an unrelated database by address?</p> <p>Those are different questions. A containment review needs answers to both.</p> <p>DNS policy belongs in a microsegmentation design. It should not quietly become the whole design.</p> <h2 id="the-useful-shift-in-dns-security">The Useful Shift In DNS Security</h2> <p><a href="https://www.nist.gov/news-events/news/2026/03/secure-domain-name-system-dns-deployment-guide-final-publication">NIST published SP 800-81r3 in March 2026</a>. Its guidance treats DNS as more than infrastructure plumbing: DNS can support Zero Trust policy enforcement and provide information for access decisions. The publication also addresses authoritative and recursive DNS security.</p>