DNS over HTTPS for Attackers and Defenders