user827272

> So how do we fix these?

> Avoid untrustworthy resolvers by using Trusted Recursive Resolver.

If it's to trust a resolver just 1.1.1.1 (or whatever)

> Protect against on-path eavesdropping and tampering using DNS over HTTPS.

This is the only real change but it is useless for everything outside a CDN Whit is basically everything that matters for users

> Transmit as little data as possible to protect users from deanonymization.

QNAME minimization can be done already, it is not a DoH thing

And if that client happens to be the only one avalible to access some service or happens to dominate the market you're doomed.

And don't forget that you can change the resolver today, as you can install uBO, but what about tomorrow?