Secure DNS (DoT and DoH) is not enough

  • Middlemen can also just reverse lookup the sites you connect to. Need a trustworthy VPN to circumvent that at least for ISPs sniffing.