DNS leaks have historically been a thorn in the side of the Tor project, if I understand correctly. Sure, you might have a SOCKS proxy configured for the HTTP

DNS leaks have historically been a thorn in the side of the Tor project, if I understand correctly. Sure, you might have a SOCKS proxy configured for the HTTP request, but depending on how the program makes the DNS query, it might bypass that proxy: https://support.torproject.org/misc/check-socks-dns-leaks/ https://support.torproject.org/misc/check-socks-dns-leaks/ Encrypted DNS isn't a perfect solution, because the request still won't go through the proxy, but at least it won't leak the info to your ISP (assuming you have something else configured as your DNS provider.) Obviously, this isn't limited to just Tor.