This one doesn’t mention other channels of leaks such as SNI (Server Name Indication) used with TLS. Between this and related RFCs (like RFC 8932: Recommendatio

This one doesn’t mention other channels of leaks such as SNI (Server Name Indication) used with TLS. Between this and related RFCs (like RFC 8932: Recommendations for DNS Privacy Service Operators), it looks like better privacy on DNS is still several years away. Tor or a trusted VPN could help to an extent, but I personally don’t see either of these as viable for all online access all the time. Running one’s own resolver on the cloud isn’t something most people can do (even though it doesn’t, and cannot, cover all the points mentioned here).