@SimonRWaters @plambrechtsen @MalwareTechBlog Looping back to DoH though, CF *could* have implemented ECS in a more privacy sensitive manner if they wished. In fact, Mozilla's own guidelines lay it out. Speak to the authoritative using DoT (if it supports it, obv).