Announcing the general availability of Domain Name System Security Extensions (DNSSEC) for Azure DNS Public Zones. With this release you can now enable DNSSEC on all existing and new public DNS Zones hosted on Azure DNS. This significant update enhances the security and integrity of your DNS infrastructure by providing cryptographic authentication of DNS data. With DNSSEC, Azure DNS Public Zones can now offer protection to our customers against various types of attacks, such as cache poisoning and man-in-the-middle attacks.
Azure Public DNS support for DNSSEC is designed to be easy to implement and manage. Users can enable DNSSEC for their DNS zones through the Azure portal, Azure CLI, Azure PowerShell or Azure Public DNS API. The Azure DNS service automatically handles all key management and signing operations, simplifying the process for DNS zone administrators. By leveraging Azure's robust infrastructure, you can ensure high availability and performance for your DNSSEC-enabled zones.
Learn more.