Thank you for the work you put into this, John.
Unfortunately DoT isn't working for me on my RT-N66. When I enable it, I get either time-outs or a response of 10.0.0.1 to all dns queries. I can't see anything obvious in the logs, and I tried a few servers, and turning dnssec on and off. I can...