> GET https://dns.google.com/experimental?ct&dns=AAABAAABAAAAAAAAB2V4YW1wbGUDY29tAACAAE https://dns.google.com/experimental?ct&dns=AAABAAABAAAAAAAAB... HTTP/2.0

> GET https://dns.google.com/experimental?ct&dns=AAABAAABAAAAAAAAB2V4YW1wbGUDY29tAACAAE https://dns.google.com/experimental?ct&dns=AAABAAABAAAAAAAAB... HTTP/2.0” I guess the stuff in the dns=bit is a query to look up the ip of dns.google.com? ;) I'm not sure if I think trusting certs for ip addresses (as opposed to domain names) is a great idea. And how else would this bootstrap?