Given that this is DNSOP, can you talk a bit about the operational aspects of the proposal? For example, what happens to DNS lookups if encrypted communications are blocked? What happens if they go through but cannot be successfully decrypted? --Paul Hoffman