Microsoft has extended its DNS-over-HTTPS (DoH) support beyond client machines to the Windows Server platform, enabling encrypted DNS queries for every endpoint on the network.
The announcement clarifies that this rollout currently secures only the communication between client devices and the DoH resolver. However, Microsoft has indicated that future updates will also encrypt traffic between the Windows DNS Server itself and upstream DNS resolvers.
To take advantage of this feature, administrators must deploy Windows Server 2025 and ensure it is fully updated with the latest Patch Tuesday releases.
Analysis: By bringing DoH to the server tier, Microsoft is tightening network security at a critical juncture, potentially reducing DNS-based attacks across enterprise environments and setting a new baseline for secure DNS practices in the industry.
News Source: Neowin
Comments
Be the first to comment.