Comment by codebudo

> How does this not just move the trust problem to the ODNS server?

That's how I read this as well. It does appear that a simple DNS proxy would accomplish the same goal without all the encryption. Are we missing something?