Defense-in-depth starts with DNS