Should be easy to work around in the short term. The browser just needs to request a well-known "test" domain (like example.com) and detect if it gets a redirect. Keeps portals working without compromising the privacy of real DNS lookups.