You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
DNSSEC is a set of extensions that use public/ private key pairs to DNS sign responses. This improves security for any client that must resolve records by providing assurance that:
Records have been sent unaltered.
The record originated from a server that owned the zone (has access to the private keys). This is secured by the parent zone who also implements DNSSEC to sign the delegation record.
Rule should check that a DNSSEC sub-resource exists in the parent public DNS zone.
Sub resource is: Microsoft.Network/dnsZones/dnssecConfigs the sub-resource name will be default.
Existing rule
No response
Suggested rule
DNSSEC is a set of extensions that use public/ private key pairs to DNS sign responses. This improves security for any client that must resolve records by providing assurance that:
Rule should check that a DNSSEC sub-resource exists in the parent public DNS zone.
Sub resource is:
Microsoft.Network/dnsZones/dnssecConfigs
the sub-resource name will bedefault
.Pillar
Security
Additional context
The text was updated successfully, but these errors were encountered: