> When both are operated by the same company, how can you know they aren't colluding? You don't. At best the client can check domain names and IP addresses, bu

> When both are operated by the same company, how can you know they aren't colluding? You don't. At best the client can check domain names and IP addresses, but that's hardly a guarantee. To solve that problem, you can combine multiple parties. For example, you can use https://odoh1.surfdomeinen.nl/proxy https://odoh1.surfdomeinen.nl/proxy as a proxy (operated by SURF [1]) to use the Cloudflare servers for lookup. I think for ODoH to work well, we need a variety of companies hosting forwarding services. That could be ISPs, Google/Microsoft/etc. or some kind of non-profit. [1]: https://www.surf.nl/en https://www.surf.nl/en