Inside PH4NTXM: #11 Authenticated DNS-over-TLS DNS deserves an explicit transport policy. In Linux and Windows modes, PH4NTXM points local resolution at Unbound and configures authenticated DNS-over-TLS forwarding. TLS authentication uses provider names and the system CA bundle, with encrypted forwarding required and no plaintext upstream fallback. The configured upstream sets follow the selected mode. Unbound also uses memory caching and conservative resolver settings, while a watchdog checks local resolution and requests a restart when the required conditions indicate a failure. Resolver availability and transport policy are both part of the design. #ph4ntxm #linux #debian #os #live #privacy #security #opsec #infosec #research #tech #technology