I am curious if a large number of people stood up their own DoH/DoT servers:
- Would France go after each one, even if they were not operating servers physically in France? It only takes a few minutes to configure Unbound+LetsEncrypt to accept DoH+DoT internet traffic. A few minutes longer to compile support for DoQ.
- Could they realistically expect individual operators of small DoH/DoT/DoQ open servers to block domains at their behest?
DNS needs a way to say “unavailable for legal reasons” so your system just picks a different resolver or resolves recursively.