> But previously by logging requests to port 53 (and 853) I can hunt down those devices quite easy. And IOT devices are required to use port 53 or 853? They do

> But previously by logging requests to port 53 (and 853) I can hunt down those devices quite easy. And IOT devices are required to use port 53 or 853? They don't have the ability to proxy their DNS requests through another service? DNS even as it exists today is not a mandate, this stuff can be circumvented. > You can set up your devices however you want. But if they're on my network, they play by my rules. I think that's fine. Block DoH on your own network. But don't complain about my browser turning it on. You can block 443 if you want, but I'm not going to be sympathetic if you argue that LetsEncrypt shouldn't exist. There's a big difference between saying that you require every device on your network to plain-text its DNS queries to you for monitoring, vs arguing that it's harmful for Mozilla to make Firefox's DNS queries more secure for everyone else. The only way DoH would be hostile to your network is if needing consent to monitor people's DNS queries when they join your network (via a settings change or confirmation that they're not using DoH) is a problem for you.