Hacker News Reader

Depends on who the upstream provider is. Having a pihole or opnsense with dnscrypt and/or unbound setup is best.

How is dnscrypt any better than DoH? And doesn't unbound still need an upstream resolver to talk to?