Nice write-up. I use dnscrypt-proxy for the same purpose, less about the encryption and more about the ease of configuration. Looks like there's a lot of overlap between the two.