Wow, Firefox by default applies DNS encryption over HTTP, to protect you from your evil ISP watching what sites you check. But you know who they use to resolve the DNS request? No other than fucking Cloudfare! So in effect, Cloudfare sees everything about the sites you visit when you use Firefox. Thanks Mozilla, but I'd rather trust my ISP than Cloudfare in that case. And cherry on the cake, they enable this by default, without opt-in request. The "champions of the Free Web" are the worst