DNS queries to the authoritative server over TLS
Transmission Control