  In this paper, we study the performance of encrypted DNS protocols and
conventional DNS from thousands of home networks in the United States, over one
month in 2020. We perform these measurements from the homes of 2,693
participating panelists in the Federal Communications Commission's (FCC)
Measuring Broadband America program. We found that clients do not have to trade
DNS performance for privacy. For certain resolvers, DoT was able to perform
faster than DNS in median response times, even as latency increased. We also
found significant variation in DoH performance across recursive resolvers.
Based on these results, we recommend that DNS clients (e.g., web browsers)
should periodically conduct simple latency and response time measurements to
determine which protocol and resolver a client should use. No single DNS
protocol nor resolver performed the best for all clients.
