Enabling ESNI in Firefox should be a countermeasure (encrypted SNI extension of the TLS so that hostname is no longer sent in plain text)

https://superuser.com/questions/1346634/modern-browser-with-...