I had suspected today before on another try but just confirmed the absolute shit that it just made on my laptop.
When turning on dns over tls on systemd-resolved be aware that it will fuck over when trying to connect to public wifi spots that have the common captive portals where only protocol allowed to work before logging in is plain dns and plain http.
