User Profile

tojens

Microsoft

Joined 6 years ago

35 Posts124 Likes

Technical PM for the Windows native HTTP stacks, IPv6 transition tech, and various IETF engagements

View All Badges

User Widgets

Recent Discussions

No content to show

Groups

Recent Blog Articles

Announcing Zero Trust DNS Private Preview
Enabling domain-name-based lockdown of Windows for Zero Trust deployments in future versions of Windows
Nov 20, 2024 Place Networking Blog
10likes
19Comments
Re: Announcing Zero Trust DNS Private Preview
desert_lizardthe identity of the client is verified when the encrypted DNS connection is established using mTLS -- this allows the admin to configure the client cert for Windows to present when conn...
Jul 18, 2024 Place Networking Blog
0likes
0Comments
Re: Announcing Zero Trust DNS Private Preview
foobar2020your suggestion is good, but it isn't a replacement for ZTDNS anymore than ZTDNS is for your suggestion. ZTDNS allows a secured PDNS server to make segmentation-by-name policy decisions fo...
Jul 18, 2024 Place Networking Blog
0likes
0Comments
Re: Announcing Zero Trust DNS Private Preview
MichaelGrafnetterI agree! ZTDNS client is not gated to Win11 SKU, so there's no reason one couldn't use it on Windows Server (though it would only affect outbound connectivity, not inbound, and ther...
Jul 18, 2024 Place Networking Blog
0likes
0Comments
Re: Announcing Zero Trust DNS Private Preview
ChristianSchindlerToday, DoH and DoT are not supported by the Windows DNS server which means ZTDNS during preview relies on third-party DNS servers. However, I know the owners of the Windows DNS ser...
May 06, 2024 Place Networking Blog
1like
0Comments
Re: Announcing Zero Trust DNS Private Preview
Alex_HQuestIdeally, the SSH server is identified by domain name (which is where an SSH client could use SSHFP records to verify the expected server fingerprint as well!), but in that case where it's...
May 06, 2024 Place Networking Blog
1like
0Comments
Re: Announcing Zero Trust DNS Private Preview
bentriggerNot at the moment. Deploying ZTDNS is going to be an incremental, difficult-to-manage process for enterprise admins that requires heavy infra and attention to get right without regressing ...
May 06, 2024 Place Networking Blog
0likes
0Comments
Re: Announcing Zero Trust DNS Private Preview
AlwaysLearningTechthis is something we're still exploring, as noted in the follow up ZTDNS post talking about what administrators will need to take into account when deploying it. The current previe...
May 04, 2024 Place Networking Blog
1like
0Comments
Re: Announcing Zero Trust DNS Private Preview
KennethMLyour thinking is spot on. Imagine an Intune device receiving the client cert it needs to present to the Protective DNS server during the TLS handshake to establish the DoH connection, along...
May 03, 2024 Place Networking Blog
4likes
0Comments
Deployment Considerations for Windows ZTDNS Client
A follow up to the ZTDNS private preview announcement explaining some considerations for future ZTDNS deployments
May 02, 2024 Place Networking Blog
7likes
1Comment