BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.devconf.info//devconf-cz-2025//speaker//LSKXXH
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-devconf-cz-2025-NBTMSH@pretalx.devconf.info
DTSTART;TZID=CET:20250613T153000
DTEND;TZID=CET:20250613T160500
DESCRIPTION:As cybersecurity threats evolve\, securing DNS traffic is a cru
 cial step in achieving a Zero Trust Architecture (ZTA). To mitigate data l
 eaks and unauthorized access\, RHEL is integrating Encrypted DNS (eDNS) su
 pport\, ensuring DNS queries are encrypted already during installation and
  boot using modern protocols such as DNS over TLS (DoT).\n\nThis presentat
 ion will cover the journey of enabling eDNS in RHEL\, from the initial mot
 ivations to the technical challenges that shaped its implementation. Secur
 ing DNS at the operating system level required coordinated updates across 
 several components\, including FreeIPA\, SSSD\, Bind\, Unbound\, NetworkMa
 nager\, and the newly introduced dnsconfd. Additionally\, we made signific
 ant changes to core infrastructure in Anaconda\, dracut\, and OpenSSL to e
 nsure encrypted DNS is available not only during runtime but also during s
 ystem installation and early boot.\n\nAttendees will gain technical insigh
 ts into the rationale behind key architectural decisions and how RHEL enab
 les system-wide encrypted DNS without requiring modifications at the appli
 cation level. We will also delve into the complexities of certificate mana
 gement for secure DNS communication\, which is essential in environments w
 ith strict security requirements.\n\nLooking ahead\, we will outline RHEL
 ’s roadmap for eDNS\, including further enhancements\, and upstream coll
 aboration. Join us to learn how Red Hat is making Zero Trust a reality for
  Linux users.
DTSTAMP:20261014T102058Z
LOCATION:E105 (capacity 70)
SUMMARY:Encrypted DNS from Boot to Runtime: A Zero Trust Milestone in RHEL 
 - Pavel Březina\, Triviño\, Antonio Torres
URL:https://pretalx.devconf.info/devconf-cz-2025/talk/NBTMSH/
END:VEVENT
END:VCALENDAR