Recital 100

Recital 100

Directive on the security of network and information systems · UE 2022/2555

(100)

In order to safeguard the functionality and integrity of the internet and to promote the security and resilience of the DNS, relevant stakeholders including Union private-sector entities, providers of publicly available electronic communications services, in particular internet access service providers, and providers of online search engines should be encouraged to adopt a DNS resolution diversification strategy. Furthermore, Member States should encourage the development and use of a public and secure European DNS resolver service.

Luxembourg specificity
loi luxembourgeoise du 28 juillet 2023 relative a la cybersecurite, modifiee par la loi du 28 juillet 2025

In Luxembourg, ILR is the national authority designated by the law of 28 July 2023 on cybersecurity (amended by the law of 28 July 2025) to supervise essential and important entities. RESTENA historically operates a national DNS resolver for research and education, and the European DNS4EU initiative (notably operated by Whalebone with a regional node) is the natural sovereign lever for Luxembourg entities seeking to materialize the diversification recommended by recital 100.

Luxgap practice: for essential and important entities under the law of 28 July 2023, we recommend a DNS4EU + internal DNSSEC-validating resolver mix, documented in the network security policy submitted to ILR during inspections.