Specifically, it seems to be the new "DNS over HTTPS" feature in Firefox, with the default Cloudflare provider. I guess 1.1.1.1 will cause the same issue.
Interestingly, without TLS, the error is "Please enable cookies", whereas on HTTPS it's "403 Forbidden" after passing through an invalid cert.