diff --git a/_includes/sections/browser-tweaks.html b/_includes/sections/browser-tweaks.html
index 2a3dcbcd..277bbd57 100644
--- a/_includes/sections/browser-tweaks.html
+++ b/_includes/sections/browser-tweaks.html
@@ -118,6 +118,24 @@
+
network.trr.mode = 2
+
+ Use Trusted Recursive Resolver (DNS-over-HTTPS) first and if it fails, use the system resolver Source
+
+ - 0 = disabled by default, may change in the future
+ - 1 = use the faster resolver
+ - 2 = use DoH first, fallback to system resolver
+ - 3 = only use DoH. This may require
network.trr.bootstrapAddress
or using an IP address in network.trr.uri
.
+ - 5 = explicitly disable DoH
+
+
+
+ network.trr.uri = CHANGEME
+ The address of your DNS-over-HTTPS provider, if you don't have one, check our encrypted DNS recommendations. It can also be changed in Settings, Network Settings, Enable DNS over HTTPS, Use Provider, Custom.
+
+ network.security.esni.enabled = true
+ Hide the address which you are requesting SSL certificate for if the server supports it. This requires DoH/TRR to be enabled even on Android 9+ when Private DNS is enabled.
+
webgl.disabled = true
WebGL is a potential security risk. Source