Beeblebrox via Unbound-users:
Hi. I just came across this little snippet from
https://calomel.org/unbound_dns.html
forward-addr: 145.100.185.15@853 # dnsovertls.sinodun.com US
forward-addr: 185.49.141.37@853 # getdnsapi.net US
DNS via TLS (Port 853/tcp) is one way to encrypt stub-resolver <->
resolver communication
find more information on https://dnsprivacy.org
There is also a list of supporting resolver. Be aware: they are named
"*Test*" with reason...
https://dnsprivacy.org/wiki/display/DP/DNS+Privacy+Test+Servers
Andreas