--- title: "Articles on Zero Trust Connectivity | ADAMnetworks (Page 2)" description: "ADAMnetworks articles on DNS, encrypted DNS, network defense, and how Zero Trust Connectivity makes default-deny practical for any device. Page 2." url: https://adamnet.works/blog/articles/2/ index: https://adamnet.works/llms.txt --- Perspectives # Articles: page 2 Technical perspectives on DNS, Zero Trust Connectivity, and modern network defense. [All posts](https://adamnet.works/blog.md) [Security Research](https://adamnet.works/blog/security-research.md) [Articles](https://adamnet.works/blog/articles.md) [Announcements](https://adamnet.works/blog/announcements.md) 13–24 of 24 [RSS](https://adamnet.works/blog/articles/rss.xml) ## [How to Block Windows Update](https://adamnet.works/blog/how-to-block-windows-update.md) January 3, 2025 · David Redekop | ADAMnetworks How to control when Windows Update can run with a short adam:ONE blocklist, either switched off by hand for maintenance or opened automatically by a weekly schedule, for endpoints that cannot run an agent. Windows Update · Patch Management · +1 Read more ## [The Dirty Dozen of DNS Attacks](https://adamnet.works/blog/dirty-dozen-dns-attacks.md) November 21, 2024 · David Redekop | ADAMnetworks Twelve DNS attacks every security team should know, from hijacking and cache poisoning to tunneling, DGAs, rebinding and port 53 abuse, with where adam:ONE has a role in each and where it does not. DNS Attacks · DNS Security · +1 Read more ## [Mastering DNS Resilience: How to Assess and Ensure Network Survivability](https://adamnet.works/blog/dns-resilience-and-network-survivability.md) October 2, 2024 · David Redekop | ADAMnetworks A checklist for DNS resilience: high-availability resolvers, multiple Active Directory DNS servers, DNSharmony resolver sets, separate ISP circuits, split resolver pairs and the monitoring that catches failures. DNS · Resilience · +1 Read more ## [Remote Access Tools: The Hidden Threat Exploited by Malicious Actors](https://adamnet.works/blog/remote-access-tools-hidden-threat.md) September 17, 2024 · David Redekop | ADAMnetworks Attackers living off the land use legitimate remote access tools as ready-made C2 channels. A researched list of tools blockable by DNS and DTTS, the self-hosted ones that need Zero Trust Connectivity, and how to allow your own. Remote Access Tools · Living off the Land · +1 Read more ## [How and Why Smishing and Phishing Sites Aren’t Detectable with TrickyPhish](https://adamnet.works/blog/why-smishing-and-phishing-sites-evade-detection.md) September 10, 2024 · David Redekop | ADAMnetworks Phishing operators now hide their sites from sandboxes by serving only mobile carrier IP space and mobile browsers. How that extends a phishing site’s life, and how adam:GO and adam:OSN still protect mobile devices. Phishing · Smishing · +1 Read more ## [DNS Encryption with DNS-over-HTTPS (DoH) and DNS-over-TLS (DoT)](https://adamnet.works/blog/dns-over-https-and-dns-over-tls.md) September 5, 2024 · David Redekop | ADAMnetworks How adam:ONE offers DoH and DoT to internal devices through Discovery of Designated Resolvers, encrypts upstream queries, and uses DTTS so encrypted DNS stays a policy control plane rather than a bypass. Encrypted DNS · DoH · +2 Read more ## [Comparing DNS Blocking Methods](https://adamnet.works/blog/comparing-dns-blocking-methods.md) August 22, 2024 · David Redekop | ADAMnetworks NXDOMAIN, 0.0.0.0, a dedicated block-page IP or the internal gateway: how protective DNS resolvers answer a blocked query, what each method means for users and SIEMs, and how adam:ONE DNSharmony combines them. DNS · Protective DNS · +1 Read more ## [Microsoft ZTDNS vs ADAMnetworks Zero Trust Connectivity (ZTc)](https://adamnet.works/blog/microsoft-ztdns-vs-zero-trust-connectivity.md) May 13, 2024 · David Redekop | ADAMnetworks How Microsoft’s Zero Trust DNS compares with ADAMnetworks Zero Trust Connectivity, the five ways Windows endpoints can operate, and why gateway and endpoint enforcement work best from one policy pane. Microsoft ZTDNS · Zero Trust Connectivity · +1 Read more ## [About Port Forwarding](https://adamnet.works/blog/port-forwarding-and-zero-trust-connectivity.md) January 13, 2023 · David Redekop | ADAMnetworks Which services are safe to expose through a port forward, which are not, and two ways to make IoT devices, cameras and controllers remotely reachable without exposing them to the whole internet. Port Forwarding · IoT Security · +1 Read more ## [The Telegram Problem](https://adamnet.works/blog/the-telegram-problem.md) December 27, 2021 · Francois Driessen | ADAMnetworks David Redekop and Francois Driessen examine Telegram’s security, privacy and harmful-content risks, from broadcast-scale channels and deepfake bots to its use as a malware command-and-control channel. Telegram · Harmful Content · +1 Read more ## [Benchmarking DNS with adam:ONE®](https://adamnet.works/blog/benchmarking-dns-with-adam-one.md) September 3, 2021 · David Redekop | ADAMnetworks A step-by-step method for benchmarking DNS performance behind an adam:ONE gateway with GRC DNS Benchmark, including the temporary firewall rules DTTS needs and a video walk-through on pfSense. DNS · Performance · +1 Read more ## [About Apple Private Relay](https://adamnet.works/blog/apple-private-relay.md) June 21, 2021 · David Redekop | ADAMnetworks How Apple Private Relay routes Safari traffic through two relay layers, why it removes network security and content filtering, and how adam:ONE answers mask.icloud.com with NXDOMAIN to keep protection in place. Apple · Private Relay · +1 Read more [Newer](https://adamnet.works/blog/articles.md) [Page 1](https://adamnet.works/blog/articles.md) Page 2