NIST updates its DNS security guidance for the first time in over a decade

This report summarizes NIST SP 800-81r3, the updated Secure DNS Deployment Guide, which provides guidance for using DNS as an active security control (protective DNS), deploying encrypted DNS protocols (DoT, DoH, DoQ), updating DNSSEC algorithm and key management recommendations, and improving authoritative server hygiene and infrastructure availability to reduce attack surface and support incident response.