I think it's a better choice because it's less complex and avoids "useful features". Bert Hubert goes through most of the points in this talk: https://www.youtu

I think it's a better choice because it's less complex and avoids "useful features". Bert Hubert goes through most of the points in this talk: https://www.youtube.com/watch?v=pjin3nv8jAo https://www.youtube.com/watch?v=pjin3nv8jAo > Aside from DoT being easier for an adversary to block HTTPS is also TLS. On the surface of things it's just a matter of two different standardized ports. > ...since blocking it forces a silent fallback to insecure DNS That depends entirely on your setup.