The problem with DoH is that it reinforces the certificate hegemony. Anyone can set up DNSSEC and run it without applying for authorisation from another party.

The problem with DoH is that it reinforces the certificate hegemony. Anyone can set up DNSSEC and run it without applying for authorisation from another party. But DoH requires a certificate signed by a CA trusted globally.