> It makes me wish I was interesting enough to be snooped on.
Oh, but you are. Having access to VMs on other networks makes you a sysadmin, which automatically raises flags[0] within NSHQ.
I've used DNScrypt[1] for some time now, which tunnels all DNS requests to a remote site over SSL. Coupled with a local DNS server[2] to cache lookups, this works amazingly well.
It will be interesting to see how this "snoopers charter" will be implemented, if at all. I get the impression it's mostly to legitimize (and scale out) what GCHQ and MI5 have been doing for a long time already, while adding some form and structure to it.
0: https://theintercept.com/2014/03/20/inside-nsa-secret-effort...