getdnsapi
Option to listen for DNS-over-TLS queries
Would it be feasible to have Stubby listen for DNS-over-TLS queries as well as send them? That way it could act as a fully-fledged DNS-over-TLS proxy without any additional software.
What is the use case for this? Does unbound not address some of the needs?
Yes, Unbound can do this, as can Knot Resolver. Maybe Stubby could do it too.
Well I do not know how much effort it would be to add such functionality. But I will say that what attracts me to Stubby is that it is a minimal tool designed for the most common use case. For more complicated cases there are alternatives, like the ones you mentioned. I would hope that scope creep does not jeopardize one of stubby's main differentiating factors compared to other resolvers.