> The first is that because mainstream DNS providers are beginning to support DoH, there is no need for anyone to set up their own private DNS server. That was

> The first is that because mainstream DNS providers are beginning to support DoH, there is no need for anyone to set up their own private DNS server. That was already true though, because they could have used those mainstream providers' unencrypted DNS servers too. > Sure it is. It effectively disables a layer of defenses from the spies. But why would any spy rely on such a layer when you've left the front door (unencrypted DNS) wide open?