The small print about how To do that configuration are determined by your on-premises email server. For Trade Server, see the following posts: DoT means that you can encrypt your DNS queries, shielding you from spoofing, destructive actors, and Many others. You can find out more about DoT in https://mysocialfeeder.com/story2448809/roundcube-webmail-install-for-dummies