document explicit HTTP proxy interaction
Some networks ban outbound connections on port 443 without using an HTTP CONNECT through an explicitly-configured proxy. The draft probably needs to discuss how/whether to try to do this from a DNS client.
It should also rule out trying to use an explicit non-CONNECT HTTP proxy for the same reason that transparent HTTP proxies will break things (see #3 (closed))