NIST has released SP 800-81r3, The Secure Domain Name System (DNS) Deployment Guide, bringing DNS security best practices in line with today’s threat landscape. The guidance highlights DNS as both a high-value attack surface and a powerful enforcement point for enterprise security policy, with a focus on securing DNS infrastructure, ensuring configuration integrity, implementing Protective DNS, and protecting the confidentiality of DNS queries. In this Infoblox webinar, experts will unpack the key changes in SP 800-81r3 and translate them into actionable steps you can take to harden your DNS, reduce risk, and operationalize NIST-aligned DNS security at scale.
Why Attend This Webinar:
- Understand what’s new in SP 800-81r3
- Understand how it might relate to NIS2 and other regulations
- See how to turn DNS from a blind spot into a control point
- Get practical guidance to reduce DNS-related risk
- Learn how to implement Encrypted DNS securely
- Bridge NIST best practices to real-world operations
What NIST SP 800-81r3 Is About:
NIST SP 800-81r3, “Secure Domain Name System (DNS) Deployment Guide,” provides comprehensive recommendations for protecting the integrity, availability, and confidentiality of DNS services across authoritative and recursive infrastructures. It explains how DNS underpins enterprise security posture and zero trust—serving as both a policy enforcement point and a rich source of telemetry for evaluating access and detecting malicious activity. The guide expands beyond DNSSEC to a broader set of best practices: securing DNS infrastructure, ensuring sound configuration and zone management, implementing Protective DNS, minimizing information leakage in queries and responses, and adopting encrypted DNS protocols while detecting and blocking rogue encrypted DNS traffic.
Meet the Presenters

Cricket Liu
Executive Vice President, Chief Evangelist, Infoblox
Cricket is one of the world’s leading experts on the Domain Name System (DNS), and serves as the liaison between Infoblox and the DNS community. Before joining Infoblox, he founded an Internet consulting and training company, Acme Byte & Wire, after running the hp.com domain at Hewlett-Packard. Cricket is a prolific speaker and author, having written a number of books including “DNS and BIND,” one of the most widely used references in the field, now in its fifth edition.

Ross Gibson
Principal Solutions Architect, Infoblox
Ross Gibson, J.D. is currently a Principal Solutions Architect for Infoblox, where he focuses on DNS architecture, DNS global server load balancing (GSLB), and DNS security. Ross is a co-author of The Hidden Potential of DNS in Security, which provides security professionals a view into the threats that can exploit DNS as well as the opportunities that DNS provides for furthering their security mission. He brings more than 25 years of experience in the networking industry along with his legal training and experience to his current role. He holds a B.S. in Commerce from the University of Virginia, and a Juris Doctorate from the University of Richmond School of Law.

Craig Sanderson
Principal Cybersecurity Strategist, Infoblox
Craig Sanderson is the Principal Cyber Security Strategist at Infoblox. Craig has over 25 years of experience in the Cybersecurity industry with a broad array of roles ranging from consultancy, security architecture, business development and product management. Over the last seven years, Craig has been responsible for creating the vision, strategy and delivering the execution of the Infoblox BloxOne Threat Defense solution. He continues to be passionate about the role that DNS can play in delivering world class cyber security with a particular emphasis on how DNS can become the foundation for national and governmental Protective DNS solutions.



