The Hidden Lock-In of Encrypted DNS: Your Resolver Is Portable, Your Security Policy Isn’t
Changing DNS providers looks simple on paper. Replace a resolver address, switch a DNS-over-HTTPS endpoint, update a DNS-over-TLS hostname, and traffic starts going somewhere else.…