Implementing Best Practices for Security

[zbalkan]

OSTIF (Open Source Technology Improvement Fund) provides Security Best Practices Checklist and Advice for those looking to determine best steps for security of their project. That's also one of the prerequisites to request an audit for a product.

Technitium DNS Server is solid but it'd be better if a security team runs an audit and having a 1-yer-plan to implement the prerequisites and then asking for an audit makes sense. Having this audit would improve both the security posture and image of the solution.

The projects below has gotten their audits.

• Unbound DNS server
• Hickory DNS server
• c-ares DNS library

It is a badge of reliability but it requires preparation. So, starting with their guidance makes sense. But it is your project and I am just recommending it. The decision is yours.

[ShreyasZare]

Thanks. Will take a look at it.