Then there's this: https://isc.sans.edu/forums/diary/Is+it+Possible+to+Identify+DNS+over+HTTPs+Without+Decrypting+TLS/25616/ https://isc.sans.edu/forums/diary/

Then there's this: https://isc.sans.edu/forums/diary/Is+it+Possible+to+Identify+DNS+over+HTTPs+Without+Decrypting+TLS/25616/ https://isc.sans.edu/forums/diary/Is+it+Possible+to+Identify... detection based on payload size alone. Any implementations with a random padding ballast header?