<a href="https://man.openbsd.org/unwind.8" rel="nofollow">https://man.openbsd.org/unwind.8</a> uses libunbound; it detects whether local DHCP DNS is working, works correctly with captive portals, and supports opportunistic or strict DNSSEC.<p>This was discussed in <a href="https://news.ycombinator.com/item?id=19738313" rel="nofollow">https://news.ycombinator.com/item?id=19738313</a> in April