In the **Add custom forwarder** dialog, there is currently no explanation how *DNS over TLS* (*DoT*) is treated. The first thing is that DoT itself is enabled as a side effect of selecting one of the available TLS types; it is confusing. And the secong thing is that an user isn't properly informed how this works. Please consider one of these solutions: 1. DoT is enabled by a checkbox. The TLS type is then (if DoT enabled) selected using the existing drop-down list. 2. The existing drop-down list is left intact and an explaining text is added (such as "No TLS" means that the regular UDP-base DNS protocol is used").