All DNS queries are currently sent in plaintext over UDP sockets. There's an open issue to support querying via TCP/IP in #19.
Once this feature is in, we may want to support DNS over TLS as defined in RFC 7858. Once TCP/IP support is in, this should be fairly easy.