As explained in the blog post ↗︎, the preferred method is DNS over HTTPS (DoH), which encrypts the entire DNS query within an HTTPS connection.
Going to require blocking Tor in France at the network level if the French authorities want to block someone from using something like DNS-over-HTTP via Tor.
Fundamentally even with TLS enabled and encrypting your DNS queries your ISP can still see what websites you are going to. Not what your doing on those sites, but they can see a visit to those sites.
Here’s a video that shows what your ISP can still see.
https://developers.cloudflare.com/1.1.1.1/additional-options/dns-over-tor/
Going to require blocking Tor in France at the network level if the French authorities want to block someone from using something like DNS-over-HTTP via Tor.
Fundamentally even with TLS enabled and encrypting your DNS queries your ISP can still see what websites you are going to. Not what your doing on those sites, but they can see a visit to those sites.
Here’s a video that shows what your ISP can still see.
https://www.youtube.com/watch?v=VNdeOpu9BoE
With ECH it can only see ip addresses. Which may be enough in many cases of course, but many sites use CDNs. Not all sites use it though.
Authoritarian enough government would just block connections with ECH and force websites to disable it of course.
But the French authorities are idiots. So there’s no win to be had, here.
Maybe deep packet inspection to drop any traffic that happens to be in the French langauge.