So my ISP was hijacking my DNS
Summary
This article discusses ISP DNS tampering and practical mitigations, including DoH/DoT, self-hosted resolvers (Unbound), and the limitations of DNSSEC for encryption. It also shares a real-world home-lab setup using Pi-hole/AdGuard, dnscrypt-proxy, and VPN tunneling to protect DNS queries.