Portmaster provides you with a secure domain resolver.
By default we upgrade all DNS request on the System to the DNS-over-TLS protocol in order to protect your precious DNS queries from prying eyes.
We also use splits horizon between your local network and the Internet. If you employ local domains for either an enterprise network or development, it will direct queries for these domains to the correct local nameservers, if they announce them.
Responses from servers are cached intelligently, invalidating any cached responses that do not conform to updated configuration.