Can someone explain to me how this is working? It seems like the equivlanet stunnel for DNS: I still have to trust my provider's (here: OpenDNS) DNS servers, th

Can someone explain to me how this is working? It seems like the equivlanet stunnel for DNS: I still have to trust my provider's (here: OpenDNS) DNS servers, they have control over the encryption, not the owner of the DNS records?