Six months after launch, we identified a key area for improvement: upstream privacy. In December 2022, we integrated dnscrypt-proxy into our stack. This crucial addition ensures that even when we fetch data from root servers, the connection is encrypted and authenticated.