In the packet trace for unencrypted DNS, it was clear that a DNS ask for could be despatched instantly by the client, accompanied by a DNS remedy from your resolver. During the encrypted DoT situation even so, some TLS handshake messages are exchanged before sending encrypted DNS messages: // https://mautic-installation61463.newsbloger.com/26066490/top-mautic-update-secrets