Unless your using DNSCrypt or DNS over TLS (not much support, so you probably aren't), you're pretty much guaranteed to be sending queries in the clear. In fact

Unless your using DNSCrypt or DNS over TLS (not much support, so you probably aren't), you're pretty much guaranteed to be sending queries in the clear. In fact if your using UDP, default in most cases, and not TCP, it's simple for anyone to respond to your queries (such as your ISP) and block the request to google. This is common enough: http://www.ckollars.org/dns-intercepting.html http://www.ckollars.org/dns-intercepting.html