Privacy Enhancements
Data at Rest (for the zone publisher)
No domain names stored in plain text, names are published using an ENS namehash
Zone enumeration can only be done by zone owner
Data in Motion (for DNS queries)
HTTPS query/response encryption
No plain text domain names
No query logs at P2P nodes