Privacy by Infrastructure: The Unresolved Case of the Domain Name System