Has anyone else run DNS Spoofability testing while using Cloudflare DNS? see: https://www.grc.com/dns/dns.htm
I’ve run it a few times over the last months and it seems there is always Entropy Loss in the Query Transaction ID. Most modern DNS services don’t have this type of issue.
Cloudflare also doesn’t mix Alphabetic Case, though this parameter is much more hit or miss than the Entropy Loss (with regard to other services supporting it).