How to keep your ISP’s nose out of your browser history with encrypted DNS (Ars Technica)