Most DNS requests are clear text, which is why DOH was introduced to secure it such that no one can snoop on you looking up something-embarrassing.com. Also, the initial request, before you get the SSL certificate from the web server, you must tell the server at 169.169.169.169 that you’re looking for the certificate for something-embarrassing.com before they can get you the correct certificate. This is why ECH was introduced. Neither of which have became mainstream yet, and so there are still some basic leakage going on.
Most DNS requests are clear text, which is why DOH was introduced to secure it such that no one can snoop on you looking up
something-embarrassing.com. Also, the initial request, before you get the SSL certificate from the web server, you must tell the server at169.169.169.169that you’re looking for the certificate forsomething-embarrassing.combefore they can get you the correct certificate. This is why ECH was introduced. Neither of which have became mainstream yet, and so there are still some basic leakage going on.