What is a DNS leak and how does it work?