diff --git a/internal/experiment/webconnectivityqa/tcpblocking.go b/internal/experiment/webconnectivityqa/tcpblocking.go
index dc568f9d10..9bc89515ec 100644
--- a/internal/experiment/webconnectivityqa/tcpblocking.go
+++ b/internal/experiment/webconnectivityqa/tcpblocking.go
@@ -11,7 +11,11 @@ import (
 // where the connection is timed out.
 func tcpBlockingConnectTimeout() *TestCase {
 	return &TestCase{
-		Name:  "tcpBlockingConnectTimeout",
+		Name: "tcpBlockingConnectTimeout",
+		// TODO(bassosimone): this test case transitions from 2 (TCP/IP blocking) to
+		// 10 (both TCP/IP blocking and HTTP blocking). The reason why this happens is
+		// that we're now adding an HTTP request to the mix. This is unfortunate. We
+		// should not flag HTTP failures here inside of the bitmask.
 		Flags: 0,
 		Input: "https://www.example.com/",
 		Configure: func(env *netemx.QAEnv) {