standard DoT port is 853 not 953; from myportslist20190323 at nym.hush.com

src/etc/unbound.conf

@@ -1,4 +1,4 @@
-# $OpenBSD: unbound.conf,v 1.15 2019/07/15 10:18:20 dtucker Exp $
+# $OpenBSD: unbound.conf,v 1.16 2019/07/26 17:22:09 sthen Exp $
 
 server:
 	interface: 127.0.0.1
@@ -71,4 +71,4 @@ remote-control:
 #       forward-tls-upstream: yes               # use DNS-over-TLS forwarder
 #       forward-first: no                       # do NOT send direct
 #       # the hostname after "#" is not a comment, it is used for TLS checks:
-#       forward-addr: 192.0.2.53@953#resolver.hostname.example
+#       forward-addr: 192.0.2.53@853#resolver.hostname.example