> it will protect against ISP and state level observations of DNS It won't if it defaults to centralized on-profit business like Cloudflare. They can tap for g

> it will protect against ISP and state level observations of DNS It won't if it defaults to centralized on-profit business like Cloudflare. They can tap for govts or sell aggregated data to ISPs someday. They aready own a lot of unencrypted traffic from TLS-termination. Wouldn't it be better to use public/private key signing and onion-like infrastructure for DNS resolving and still keep it distributed?