CISA releases guidance for agencies on encrypting web traffic under zero trust strategy

The Cybersecurity and Infrastructure Security Agency is providing federal agencies support to comply with zero trust requirements for encrypting web traffic through the Domain Name System, in a guide that contains an actionable checklist and recommendations for prioritizing implementation steps.

The Domain Name System, which routes internet traffic to specific IP addresses, “forms a cornerstone for supporting and enabling enterprise IT,” CISA says in the guide released on Thursday.

CISA says, “Traditionally, however, DNS has not supported methods for...