Best practice for securing DNS record

[Subramanian, Karthikeyan]

Best practice for securing DNS A records and other records.

Mainly focusing on “A” records configured in DNS system are secure and not stale.
Few points collected.
-> Check the IP address that belong to our organization
-> Check the IP are active and not opened to all the ports
-> Check the certificate are valid/secure, if its responding in application layer (http , https)

Do you have any best practice guidelines for A records. Want to check if any available TOOL  to validate the records are safe on the DNS layer.

Thanks



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20220210/025ae122/attachment.html>