Replying just to point out that OpenDNS do DNSCurve which is different to DNSSEC in that it is encrypted end to end. Even so DNSCurve would allow OpenDNS to vie

Replying just to point out that OpenDNS do DNSCurve which is different to DNSSEC in that it is encrypted end to end. Even so DNSCurve would allow OpenDNS to view queries and implement a blacklist - because they are an endpoint and have to process requests, which wasn't apparent to me when I glossed over DNSCurve first but is obvious now.