Encrypting DNS end-to-end

This post details a pilot with Facebook to test the feasibility of securing the connection between 1.1.1.1 and Facebook's authoritative name servers using TLS. It found that while initial connection adds some latency, the overhead is amortized over many queries, resulting in DNS latency on par with average UDP connections.