that's why mozilla rolled out dns over https.