per their faq they support DNSSEC but it does not say anything about DNSCrypt. Their argument for use is that they are not tracking your every move like the folks at google. http://www.freenom.world/en/faq.html