Firefox turns encrypted DNS on by default to thwart snooping ISPs (Ars Technica)