Yeah, I really like Stubby. Just last week I set up a Raspberry Pi with Stubby and Unbound, it was actually pretty easy. Stubby is doing DoT and DNSSEC validati

Yeah, I really like Stubby. Just last week I set up a Raspberry Pi with Stubby and Unbound, it was actually pretty easy. Stubby is doing DoT and DNSSEC validation, and Unbound handling caching and a local zone for my home devices, which is really nice. I might look at trying Pi-hole eventually instead of Unbound to do DNS level ad/tracker blocking but I'll keep Stubby there to do the DoT.