> In place of that, we get one central point of DNS censorship. Just don't use Cloudflare as your DoH resolver. What is preventing DNS from becoming centralize

> In place of that, we get one central point of DNS censorship. Just don't use Cloudflare as your DoH resolver. What is preventing DNS from becoming centralized, and why is DoH different? You can still use any resolver you want, and network-wide settings will come out once network hardware and operating systems catch up to the ecosystem and start implementing their own support. It is easier to block DNS queries and censor specific sites over unencrypted DNS than it is to block specific sites when you can encrypt your queries to any DoH provider, even ones that are running locally on your own network. In fact, one of the primary criticisms of DoH from UK ISPs is that it will make it harder for them to block pirate sites and fulfill court orders to block websites[0]. When you listen to the actual censors, they all want DNS to stick around. That should tell you something about whether DoH really is a tool for censorship. > I'd rather have a mode where regular DNS and centrally controlled DNS are compared Why would this be harder to do with DoH than it would be to do with DNS? [0]: https://indico.uknof.org.uk/event/46/contributions/668/attachments/898/1109/UKNOF43_Potential_ISP_challenges_with_DNS_over_HTTPS_Issue_1A_050419.pdf https://indico.uknof.org.uk/event/46/contributions/668/attac...