@nikolal @Wetrix at the browser and the DNS server, just like HTTPS. So to block ads you'd have to middleman your own connection basically. I like DNS over HTTPS or TLS but I would turn it off in the browser and run my own DNS server on my network or locally on the machine that updates its registry over HTTPS, that way that server can block ads and trackers network or device wide.