I agree, I upvoted it because it's better technically than some of the others I've seen recently. But having DNS and HTTP conceptually jammed sideways into the

I agree, I upvoted it because it's better technically than some of the others I've seen recently. But having DNS and HTTP conceptually jammed sideways into the networking stack makes my head hurt. You're also correct about this: DoT and HTTPS both use TLS (you can use nginx to terminate TLS in front of a DNS server and feed it TCP, just like you can put it in front of a web server).