DNSCrypt or RethinkDNS (the resolver, not the app, although the app is awesome as well)