Updated Optional Hardening (markdown)

Optional-Hardening.md

@@ -162,24 +162,26 @@ You can allow exceptions if you want to stay logged in to some sites:
 ### Secure DNS
 Setup and enforce DNS-over-HTTPS (DoH).
 
-#### Provider
-* Use the provider below for better [threat protection](https://quad9.net/service/threat-blocking/).
-* :star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats.
-```javascript
-// PREF: set DoH provider
-user_pref("network.trr.uri", "https://dns.quad9.net/dns-query");
-```
-
 #### Mode
-* `3` has site-exceptions with a nice UI on the error page:
-    * Go to `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Manage Exceptions*
-* :warning: Set to `2` if your workplace or university causes issues with alternative DNS.
+`3` has site-exceptions with a nice UI on the error page:
+  * Go to `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Manage Exceptions*
+
+:warning: Set to `2` if your workplace or university causes issues with alternative DNS.
 ```javascript
 // PREF: enforce DNS-over-HTTPS (DoH)
 user_pref("network.trr.mode", 3);
 user_pref("network.dns.skipTRR-when-parental-control-enabled", false);
 ```
 
+#### Provider
+Use the provider below for better [threat protection](https://quad9.net/service/threat-blocking/).
+
+:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats.
+```javascript
+// PREF: set DoH provider
+user_pref("network.trr.uri", "https://dns.quad9.net/dns-query");
+```
+
 ***
 
 ### Fingerprinting