Best explanation I've seen is MS increased the randomness in choosing
a port to query the DNS server on, so that a bad guy can't plant a false
entry in some cache and wait for you to be redirected...