jup, I am concerned as well. cloudflare DOH fortunately uses it own domain for dns, so you can block it at firewall level. Google could be evil and make reso

jup, I am concerned as well. cloudflare DOH fortunately uses it own domain for dns, so you can block it at firewall level. Google could be evil and make resolver "google.com", so you would have to block whole google. I was talking to a few people, of creating a list of all public doh servers, so we could all use it on our firewalls to block them.