@plambrechtsen @MalwareTechBlog Worth noting though, that this is not *entirely* Cloudflare's fault in the case of DoH. If you look at the requirements @Mozilla impose for upstream ECS (assumning you want to be included in their pool) it sets a bar that effectively prohibits any provider from including ECS