Enabled standard.
Force HTTPS ON
Use secure DNS with my provider
(i use vpn on a public hotel wifi, which has many ports blocked - OPEN VPN )