NSA urges use of enterprise resolvers to protect DNS traffic on corporate networks

The National Security Agency is recommending that security teams use designated DNS resolvers to lockdown DNS over HTTPS (DoH), effectively preventing eavesdropping, manipulation and exfiltration of DNS traffic.