The UK Officially Declares War On...Porn → Re: how to block

outside dns requests are very easy to block/redirect/hijack.

secure dns is not that easy to break. You just move on to one of the next on the list. Even if they block them all, you just point at a further upstream dns server.

you capture all packets that are using port 53 udp, redirect those requests to your own dns. the isp doesn't have to modify the zones at all. they can simply redirect the destination of the packet.

not so easy with secure dns, it is designed to prevent this

»en.wikipedia.org/wiki/Do ··· gorithms

»www.dnsleaktest.com/what ··· roxy.php

anything short of a vpn will not prevent this.

It does stop it that's why secure dns is active. The hash can't be faked yet.