Thanks. I was also thinking... how does DoH prevent an ISP from spying on you? Even though the DNS requests and responses are encrypted, content requests are still routed via the ISP, right?

So the ISP still has a log of which IPs you’ve visited. They can resolve this back to site names and get the same information on you they had before.

Edit: answer here: https://security.stackexchange.com/questions/200201/how-does...