And the two most popular ways to encrypt DNS queries rely on TLS (DNS over TLS and DNS over HTTPS).