At the rate things are going you're likely going to want to just blackhole all of the public DNS-over-https providers[0] to ensure that it's not switching to Do

At the rate things are going you're likely going to want to just blackhole all of the public DNS-over-https providers[0] to ensure that it's not switching to DoH to get around your rules. [0]: https://gist.github.com/roycewilliams/dd13c8f4a3371a57f8dd82f531530b4e https://gist.github.com/roycewilliams/dd13c8f4a3371a57f8dd82...