use EDNS0 padding for traffic analysis obfuscation on TLS connections
See RFC 7830 for a description of this option.
I propose to add a config option: net.tls_padding(NUMBER)
, which will pad the cleartext of all DNS responses sent over TLS to a multiple of NUMBER.