Intro to DNS of https from mozilla.  But it doesnt explain how the resolve the bootstrap problem.  How does ones mozilla authenticate cloudflare's DoH endpoint? https://hacks.mozilla.org/2018/05/a-cartoon-intro-to-dns-over-https/