I tried posting this on the wiki, but it kept getting flagged as spam.
Feature request: secure/validated DNS lookups
The Swiss/German Privacy Foundation(s) run some servers that accept encrypted https/ssl dns requests.  There is a howto on how to implement this using socat and stunnel.  www dot privacyfoundation dot de backslash wiki backslash SSL-DNS
They can also use dnssec, which could be coupled with the firefox/iceweasel extensions like DNSSEC-{tools,validator,drill} 
http://www.privacyfoundation.de/service/serveruebersicht/