CISA has released Encrypted Domain Name System (DNS) Implementation Guidance for federal civilian agencies to secure their IT networks in line with federal zero trust strategy and statutory mandates, with a focus on encrypting DNS traffic technically feasible and using CISA's Protective DNS capability.
https://www.cisa.gov/news-events/news/cisa-publishes-encrypted-dns-implementation-guidance-federal-agencies