> Ah, so users can choose to override the local network administration? ... Presumably enabling DoH makes malware, advertising, etc., impossible to block? It w

> Ah, so users can choose to override the local network administration? ... Presumably enabling DoH makes malware, advertising, etc., impossible to block? It was always trivially possible to bypass DNS-based access control. Even before the establishment of DoH as a standard, you could have just served a text file containing the IP over HTTPS.