[mfenniak]

DoH uses HTTPS; it solves redirects because you can use a trusted server, and not have the request intercepted and the response spoofed.