I think the big issue for me is the use of "trusted" in the proposal.
What does that actually mean? Who is doing the trusting?
Does it mean
that Firefox can "trust" the local caching DNS server,
and if so, why
would that server be any more "trustworthy" than the upstream nameserver
delivered to you by DHCP?
does do something, does that something break hotspot or portal detection