The Dutch Ministry of Justice and Security warns about problems with encrypted DNS queries

National Cyber Security Center (NCSC) of the Netherlands released a factsheet that warns organizations about potential problems that new DNS encryption protocols (DoH and Dot) can bring about. They are ineffective security controls, leaking of sensitive information and exposing internal resource naming, and breaking connectivity. The NCSC recommends organisations to decide on preferred (DNS) resolvers, configure these on devices under administrative control and take note of the benefits provided by modern DNS transport protocols.