Cloudflare addresses this in the blog post: There are a couple of different approaches. One is DNS-over-TLS. That takes the existing DNS protocol and adds tran

Cloudflare addresses this in the blog post: There are a couple of different approaches. One is DNS-over-TLS. That takes the existing DNS protocol and adds transport layer encryption. Another is DNS-over-HTTPS. It includes security but also all the modern enhancements like supporting other transport layers (e.g., QUIC) and new technologies like server HTTP/2 Server Push. Both DNS-over-TLS and DNS-over-HTTPS are open standards. And, at launch, we've ensured 1.1.1.1 supports both. We think DNS-over-HTTPS is particularly promising — fast, easier to parse, and encrypted.