Paul Vixie talks about DNS over HTTPS

Paul Vixie was responsible for BIND from 1989 to 1999, and is the author of a dozen or so IETF RFC documents about DNS. He also started the first anti-spam company (MAPS) where he co-invented the DNS RBL (Realtime Blackhole List), and was the founder and later president of the first U.S.-based commercial Internet Exchange (PAIX). Today he serves as CEO of Farsight Security, home of the Security Information Exchange (SIE) and the world’s leading Passive DNS database (DNSDB). He wrote the Cron software used on all UNIX-type computers today. He is also co-inventor of the DNS Response Rate Limiting (RRL) and Response Policy Zone (RPZ) feature-sets now in wide use to protect the operational Internet Domain Name System against online attacks. He received his Ph.D. from Keio University in 2011, and was inducted into the Internet Hall of Fame in 2014.
More Info:

[abraham]

Best talk I’ve ever heard on DNS security so far from a speaker with a great personality and chasm.

[cornel]

Quite soothing, Ron Swanson-like voice.

[mansnilsson]

Regarding the first question, no, AD won't break without using DCen as FSRen. But you need to understand how to do it. Clue on request.