@ryanlrussell @mk270 @AlecMuffett I have serious concerns about Cloudflare's non-ECS DoH being default - it fucks over nearly every CDN except CF's (coincidence?). But DoH exists because of other issues with DNS's trust model, and those need to take precedence. Hopefully some better public resolvers will follow