This morning's lesson (once again): never, ever try to implement privacy-protecting DNS if you need your devices to actually work.