diff --git a/netcheck/netcheck.go b/netcheck/netcheck.go
index dd995b89e..73b3dcd0d 100644
--- a/netcheck/netcheck.go
+++ b/netcheck/netcheck.go
@@ -207,6 +207,12 @@ func GetReport(ctx context.Context, logf logger.Logf) (*Report, error) {
 		}
 	}
 
+	// TODO: if UDP is blocked, try to measure TCP connect times
+	// to DERP nodes instead? So UDP-blocked users still get a
+	// decent DERP node, rather than being randomly assigned to
+	// the other side of the planet? Or try ICMP? (likely also
+	// blocked?)
+
 	return ret.Clone(), nil
 }