Make the libc resolver do DoH, and drop it from firefox,half the problems go away. The other half of the problems are around defaulting to allowing cloudflare

Make the libc resolver do DoH, and drop it from firefox,half the problems go away. The other half of the problems are around defaulting to allowing cloudflare to inspect your traffic, instead of comcast. And the lack of integrity and encryption for the rest of the DNS infrastructure. And the expansion of the complex and difficult to secure x509 certificate regime which we should be moving away from. (Something like gossamer seems to be a big step in the right direction) I want encrypted dns, just not a half-assed hack of an implementation that is going to be impossible to fix once deployed.