When the TLS connection is established, the DNS stub resolver can deliver DNS in excess of an encrypted connection, blocking eavesdropping and tampering. one.1.one.one's terms and conditions also point out that "Warp and Warp+ will never route traffic data from your device through the Cloudflare network for certain Internet properties, https://angeloixkyk.jts-blog.com/28331258/details-fiction-and-warp