Announcing the general
availability of Domain Name System Security Extensions (DNSSEC) for
Azure DNS Public Zones in US Gov and China regions. With this
release you can now enable DNSSEC on all existing and new public DNS Zones
hosted on Azure DNS. This significant update enhances the security and
integrity of your DNS infrastructure by providing cryptographic authentication
of DNS data. With DNSSEC, Azure DNS Public Zones can now offer protection to
our customers against various types of attacks, such as cache poisoning and
man-in-the-middle attacks.
Azure Public DNS support for
DNSSEC is designed to be easy to implement and manage. Users can enable DNSSEC
for their DNS zones through the Azure portal, Azure CLI, Azure PowerShell or
Azure Public DNS API. The Azure DNS service automatically handles all key
management and signing operations, simplifying the process for DNS zone
administrators. By leveraging Azure's robust infrastructure, you can ensure
high availability and performance for your DNSSEC-enabled zones.
Learn more.