Dnscrypt also does not solve the sni problem.