> DNSCrypt has been out a couple of years but does not yet have a standard RFC https://datatracker.ietf.org/doc/draft-denis-dprive-dnscrypt/ https://datatracke

> DNSCrypt has been out a couple of years but does not yet have a standard RFC https://datatracker.ietf.org/doc/draft-denis-dprive-dnscrypt/ https://datatracker.ietf.org/doc/draft-denis-dprive-dnscrypt... It's not used by DNS root servers because it's designed to secure communications between clients and caches, not between caches and authoritative servers.