funfun
11
If you read that comment in full, it is just about its not-yet-standard status as well as the fact that it is “camouflaging” name resolution queries within regular HTTP traffic. Technically, it is not that much of a hack. From a security point of view it is equivalent to DoT. From a privacy point of view, it is certainly not worse than DoT either.