MICROSOFT PLANS TO LOCK DOWN WINDOWS DNS LIKE NEVER BEFORE. HERE'S HOW

Summary from the TLDR newsletter

Zero trust DNS (ZTDNS) encrypts and cryptographically authenticates connections between end-user clients and DNS servers and enables administrators to tightly restrict the domains these servers will resolve.