DNS leak

When DNS queries bypass the tunnel and expose browsing to the local resolver.

In practice this matters because anti-bot systems weigh it directly, and because providers describe it inconsistently. The directory lists what each provider publishes, and says when a claim cannot be checked.