Aqua CSPM

DNS Security Signing Algorithm

Quick Info

Plugin TitleDNS Security Signing Algorithm
CloudGOOGLE
CategoryDNS
DescriptionEnsures that DNS Security is not using the RSASHA1 algorithm for key or zone signing
More InfoDNS Security is a feature that authenticates all responses to domain name lookups. This prevents attackers from committing DNS hijacking or man in the middle attacks.
GOOGLE Linkhttps://cloud.google.com/dns/docs/dnssec
Recommended ActionEnsure that all managed zones using DNSSEC are not using the RSASHA1 algorithm for key or zone signing.

Detailed Remediation Steps