Addressing DNS Resolution on Federal Networks

The purpose of this memorandum is to remind agencies of their legal requirement to use EINSTEIN 3 Accelerated (E3A)’s Domain Name System (DNS) sinkholing capability for DNS resolution and to provide awareness about recent security and privacy enhancements to DNS resolution protocols – in particular, DNS over HTTPS (DoH) and DNS over TLS (DoT).