Practical Internet of Things Security - Second Edition

Network services

Organizations must also plan for any required Domain Name System (DNS) integration. This is required for any endpoint or gateway that needs to communicate using URLs. Consider protocols such as DNS-Based Authentication of Named Entities (DANE) for gateway to infrastructure communication and backhaul service communication. DANE allows much tighter association of certificates to named entities (URLs) by leveraging DNSSEC, and can significantly help deter various web-based MITM attack scenarios.