DNS over HTTPS–What Is It and Why Do People Care? [pdf]
Disclaimer:  This will be a wildly unpopular opinion.<p>I do not believe that DoH was created first and foremost to protect the privacy of people.  I believe that it was created to use the frog in boiling water methodology of silently pushing millions of people into centralized logged DNS that can be used for whatever purpose those companies see appropriate, in my personal opinion.<p>I do not believe this opinion is far fetched.  No company is going to just provide a large amount of infrastructure out of the kindness of their hearts.  I am not saying that philanthropists do not exist.  They do, but not here.  This is a data grab first and foremost, in my opinion.<p>Another factor in my opinion is the lack of support for a corporate infrastructure.  Some companies may manage some facets of user settings in Chrome and Firefox via AD policies, but I believe that is the exception rather than the norm.  Companies will be leaking even more internal infrastructure topology than they do today.  It isn&#x27;t like ISP&#x27;s manage browser settings, nor would they want to.<p>Nation states?  DoH will not affect them at all.  They will simply null route all of the DoH hosts like they do with existing proxies and VPN providers.  This is what I had to do in my home network so that I could maintain control of my DNS.