How Cloudflare’s 1.1.1.2 DNS resolver adds malware and phishing protection to the familiar 1.1.1.1 service.