diff --git a/etc/unbound/unbound.conf.d/blocklist.conf b/etc/unbound/unbound.conf.d/blocklist.conf
index b2db58a2..062c2ac1 100644
--- a/etc/unbound/unbound.conf.d/blocklist.conf
+++ b/etc/unbound/unbound.conf.d/blocklist.conf
@@ -2,7 +2,8 @@ server:
 
 # Tell Firefox to not automagically send traffic to Cloudflare as there is
 # this Unbound using DNS-over-TLS / DNSCrypt without the need for it to use
-# separate DNS.
+# separate DNS. Encrypted client hello requiring DoH is a separate issue
+# for somewhere else.
 local-zone: "use-application-dns.net." always_nxdomain
 
 # I have something very aggressively attempting to resolve Google Analytics