1) is a much smaller problem than 2) indeed, but it does still happen. 5) This hides your queries from middle boxes, but your DNS server can still see the doma

1) is a much smaller problem than 2) indeed, but it does still happen. 5) This hides your queries from middle boxes, but your DNS server can still see the domains you are looking up. (There are some proposals to address this that involve a proxy who can't decrypt your request, so the DNS server can't see who sent the query.)