Useless without pinning. If you're using DNS-over-HTTPS, you should be safe though. dnscrypt-proxy enforces pinning (the parent cert signature is included in

Useless without pinning. If you're using DNS-over-HTTPS, you should be safe though. dnscrypt-proxy enforces pinning (the parent cert signature is included in the DNS stamp required to connect), and I guess Firefox and cloudflared also do.