@plambrechtsen @MalwareTechBlog @mozilla Ooops, forgot to include the link to Mozilla's rules - https://wiki.mozilla.org/Security/DOH-resolver-policy The encryption requirement is fine, but the second half of that sentence means the majority of DoH providers just won't bother with ECS, or will whitelist (like @OpenDNS do with UDP/53) https://twitter.com/bentasker/status/1181129798296494080/photo/1