diff --git a/static/faq.html b/static/faq.html
index 69497da0..ee1335b2 100644
--- a/static/faq.html
+++ b/static/faq.html
@@ -413,6 +413,10 @@
             network-provided DNS servers, this prevents the network from monitoring or tampering
             with DNS requests/responses.</p>
 
+            <p>As an example, set the hostname to <code>one.one.one.one</code> for Cloudflare DNS.
+            There are various other mainstream DNS-over-TLS options available including Quad9,
+            Google and AdGuard.</p>
+
             <p>Configuring a static IP address for a network requires entering DNS servers
             manually, but you should still use the Private DNS feature with it, and you shouldn't
             misuse the static IP address option just to override the DNS servers.</p>