[ZenPsycho]

how does this interact with TLS, particularly DNS over TLS? An OS level http proxy would have to MITM the TLS stream.