> It's three times faster than 8.8.8.8

You mean 3x faster for you, right? We're talking about a geographically distributed system here... for me it's not too different. Or do you mean their DNS servers are somehow by their nature 3x faster than Google's at responding?

No, I mean faster across a broad benchmark suite from 227 globally distributed test locations. 1.1.1.1 is faster in every region - in Africa and Oceania, they're faster by over 100ms on average. It's conceivable that some users could get faster resolution from 8.8.8.8, but highly unlikely.

https://www.dnsperf.com/#!dns-resolvers

Cloudflare are a CDN company. Running a fast geographically distributed system is their core competence.

Absolutely agree, ideally we’d all be using DNS-over-TLS, however I think but DoH(S) is a ‘good enough’ alternative /if/ you trust the company running the servers.

Google I have essentially no trust in at all anymore (or maybe ever), Cloudflare I trust to a ‘reasonable’ degree; by that I mean I don’t believe they would (at the and leading up to the time of writing this comment) sell identifiable user data from their 1.1.1.1 DNS service and they have a very high technical skill level when it comes to internet security especially with regards to routing and network metadata. However it’s still not ideal or even slightly close to perfect security and while I’d trust Cloudflare over Google in a heartbeat - like anything that could change and better options that are also easy to use may (will likely) pop up.

1.1.1.1 also supports DNS-over-TLS. DNS-over-HTTPS is clearly an ugly hack, but it's probably a necessary hack for the time being.

https://developers.cloudflare.com/1.1.1.1/dns-over-tls/

Oh I didn’t know that, thanks for the link!

If we are talking ideals, then ideally we would be using something a lot better than the DNS protocol, which has been hammered out of shape in order to achieve things pretty hard nowadays, and not DNS-over-something at all.