Comment by dsr_

Things that do DNS over HTTP are asked to respect the use-application-dns.net canary. If use-application-dns.net queries are blocked by the local resolver, the thing should use the local resolver, unless there is a manual override by the human user.