Could anyone explain what kind of information can ISP see about the DNS queries when DNSCrypt proxy is used on my router, configured with some Public DNSCrypt-enabled resolvers (not the ISP's DNS resolvers).
I am aware that DNSCrypt is designed mainly for Client-to-Resolver DNS validation (while DNSSEC is another technology that provides AuthoritativeDNSserver-to-Resolver validation).
However DNSCrypt also provides Encryption of DNS queries. In this case can ISP see the contents of DNS query when DNSCrypt is used? Or does it see only the fact of DNS traffic going from my public IP to the IP of DNSCrypt-enabled Public Resolver, but not what site I query?