Running nslookup www.youtube.com 8.8.8.8 and seeing Server: 8.8.8.8 is reassuring. It identifies the destination and the claimed source of the accepted reply, however, rather than authenticating who generated it. Plain UDP/53 provides no such authentication.

On September 27, 2026, I tested this from an iStoreOS router. The strongest observation was a matching DNS response to a query addressed to an IP reserved for documentation, where no public recursive resolver should exist.