1) Fair enough, 25% of the requests would just take ~4x as long to get a more-or-less complete sampling. So how about a revised version: shard the requests, so

1) Fair enough, 25% of the requests would just take ~4x as long to get a more-or-less complete sampling. So how about a revised version: shard the requests, so CloudFlare only sees A-G, Google only sees H-P, etc. 2) No argument about that. I'm considering the privacy angle. A pre-DoC proxy would know your IP but not the DNS request contents, and the DoC provider would have the request but not the original IP.