From 7876a0816c3f591eb61cf9a1f5d6072d9614eb2e Mon Sep 17 00:00:00 2001
From: yokoffing <11689349+yokoffing@users.noreply.github.com>
Date: Sat, 7 Sep 2024 17:38:52 -0400
Subject: [PATCH] Updated Optional Hardening (markdown)

---
 Optional-Hardening.md | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/Optional-Hardening.md b/Optional-Hardening.md
index 7bee3fb..81607f2 100644
--- a/Optional-Hardening.md
+++ b/Optional-Hardening.md
@@ -193,14 +193,15 @@ Setup and enforce [DNS-over-HTTPS](https://support.mozilla.org/en-US/kb/firefox-
 #### DoH Provider
 Use the DoH address below to protect against security threats, ads, trackers, and some annoyances. It is using DNSwarden's free DNS with Hagezi's [Pro](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#pro) and [threat intelligence](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#tif) lists.
 
+:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. This will allow you to customize your solutions to your network.
+
 ```javascript
 // PREF: set DoH provider
 user_pref("network.trr.uri", "https://dns.dnswarden.com/00000000000000000000018"); // Hagezi Pro + TIF
 ```
 
-:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. This will allow you to customize your solutions to your network.
-
-#### Option 1: Increased Protection
+#### Enforce DoH
+##### Option 1: Increased Protection
 [Increased Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) will switch back to your local provider if there are any issues.
 
 > [!TIP]
@@ -214,7 +215,7 @@ user_pref("network.trr.mode", 2);
 user_pref("network.trr.max-fails", 5);
 ```
 
-#### Option 2: Max Protection
+##### Option 2: Max Protection
 [Max Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) displays user-friendly error pages with custom exceptions.
 
 * `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Max Protection*