> if your DNS resolver is malicious and points all domains to a malicious IP then https is completely useless.

100% false. HTTPS absolutely protects against that.