Notifications
Clear all
Topic starter
24/06/2026 11:57 pm
TL;DR: DNS outages show that redundancy alone does not preserve digital trust, because applications, monitoring, authentication chains, and recovery tools can fail when name resolution breaks, according to DigiCert. In hybrid cloud environments, resilience now depends on measurable DNS continuity, not just duplicated infrastructure.
NHIMG editorial — based on content published by DigiCert: DNS resilience: Strengthening digital trust across hybrid clouds
By the numbers:
- As certificate lifetimes shorten from 398 days to 90 and soon 47, automation has become essential.
Questions worth separating out
Q: How should security teams test DNS resilience in hybrid cloud environments?
A: Security teams should test both authoritative and recursive resolution, then verify whether authentication, application discovery, and recovery workflows still function under partial failure.
Q: Why does DNS failure create identity risk as well as availability risk?
A: DNS failure creates identity risk because authentication, service discovery, and certificate validation often depend on name resolution to complete.
Q: How do teams know whether DNS observability is actually working?
A: Teams know DNS observability is working when they can see query latency, cache behaviour, propagation delays, and resolver degradation before users notice a problem.
Practitioner guidance
- Map DNS dependencies into identity workflows Identify every authentication, certificate validation, service discovery, and recovery process that depends on DNS resolution, then test what fails when recursive or authoritative resolution degrades.
- Instrument resolver-level observability Track query latency, cache health, propagation delay, and resolver availability across regions so DNS issues are visible before they interrupt access or automation.
- Align DNS automation with certificate renewal Tie domain validation, certificate refresh, and policy updates to automated DNS workflows so short-lived trust does not depend on manual intervention.
What's in the full article
DigiCert's full blog covers the operational detail this post intentionally leaves for the source:
- Specific discussion of UltraDNS and the DigiCert DNS Monitoring Platform in the context of hybrid cloud resilience
- The vendor's own explanation of DNSSEC, policy-driven management, and automated domain control validation
- Details on global observability, routing, and recovery features that support DNS continuity at scale
👉 Read DigiCert's blog on DNS resilience across hybrid clouds →
DNS resilience in hybrid clouds: where trust continuity breaks?
Explore further
25/06/2026 8:46 am
DNS resilience is now an identity-adjacent control surface, not a network afterthought. When name resolution fails, authentication chains, service discovery, and recovery tooling lose the ability to complete their own workflows. That makes DNS continuity part of the trust fabric that supports human, NHI, and platform access. Practitioners should treat DNS as a dependency in identity architecture, not a separate reliability concern.
A few things that frame the scale:
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job, according to The 2026 Infrastructure Identity Survey.
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security, according to The 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: Who should own DNS continuity in a digital trust programme?
A: DNS continuity should be owned jointly by infrastructure, security, and identity teams because it affects resolution, access, and trust validation at the same time. The governance model should assign clear accountability for failover, monitoring, and automation. When DNS is treated as shared trust infrastructure, it stops being an invisible operational gap.
👉 Read our full editorial: DNS resilience in hybrid clouds depends on trust continuity
