Bind with dnscrypt-proxy

[lbutlr]

Running bind 9.9.9 and am interested in setting up dnscrypt to go with it.

Is dnscrypt-proxy the right way to go, or encrypt-wrapper? (it looks like wrapper is a client tool and that -proxy is what actually talks to the clients).

If anyone has done this is it reasonably simple to setup and maintain? 

NB: "The message headers matched ^From:.*@.*@.*$" is the dumbest filter ever and a perfect example of a lazy regex.

-- 
Apple broke AppleScripting signatures in Mail.app, so no random signatures.