DNS is one of the oldest pieces of protocol "Infrastructure" used in the Internet, and the most widely used. Confidentiality or privacy of users' DNS queries and responses was not included in its design. The DPRIVE working group was created to design a mechanism to add a layer of confidentiality to DNS queries, without adversely impacting the existing DNS protocol or the user base. This talk will discuss the various ways DNS queries are exposed to leakage and surveillance, what has been designed and implemented, and where we are going next.