DNS has, unfortunately, always had some inherent weaknesses because it’s transported in plain text. DNSSEC has never attempted to address that (crazy, I know). Encrypting all DNS traffic means a fundamental change to the security of the system on the whole and a strong improvement.It doesn’t work at all on my Mac connected via my Time Capsule. Perhaps it was meant to be used on public Wi-Fi hotspots? Encrypting DNS