The truth about dnscrypt-proxy and DNSSEC?

Thanks for your thoughts, very interesting. Especially randomly distributing DNS requests over multiple upstream servers, very nice idea.

Still, I'd like to find a version where external requests are limited as much as possible, except for a once-a-week/month update of the local DNS data, and an obfuscated query in case of a rare miss.

I don't mind risking 'getting their attention'. If enough average citizens start using this, then this will no longer be a signal. There are lots of reasons to want privacy like this, I shouldn't have to think 'ooh, what will the spy agencies think about this'. That's the whole point, not wanting to think "what would they think", which I find more and more people do now. Thoughts like "How will it look to the authorities if I visit this website.. hmm, better not visit it." are a subtle loss of freedom, and can be detrimental to democracy.

Funny that you mention denying internet all together, because that is something I'm also developing. But I'd rather not go into that one online.

User @DanSchaper has his own upstream resolver already: