I tried posting this on the wiki, but it kept getting flagged as spam.
Feature request: secure/validated DNS lookups
The Swiss/German Privacy Foundation(s) run some servers that accept encrypted https/ssl dns requests. There is a howto on how to implement this using socat and stunnel. www dot privacyfoundation dot de backslash wiki backslash SSL-DNS
They can also use dnssec, which could be coupled with the firefox/iceweasel extensions like DNSSEC-{tools,validator,drill}
http://www.privacyfoundation.de/service/serveruebersicht/