Mention new NSM warnings

diff --git a/etc/NEWS b/etc/NEWS
index a4a11cc787ab800b2f06dd915116a4920ace3320..cd47464039291ba6af4a193ef2bcaa60167fc139 100644 (file)
--- a/etc/NEWS
+++ b/etc/NEWS
@@ -275,7 +275,8 @@ variable.
 +++
 ** TLS connections have their security tightened by default.
 Most of the checks for outdated, believed-to-be-weak TLS algorithms
-and ciphers are now switched on by default.  By default, the NSM will
+and ciphers are now switched on by default.  (In addition, several new
+TLS weaknesses are now warned about.)  By default, the NSM will
 flag connections using these weak algorithms and ask users whether to
 allow them.  To get the old behavior back (where certificates are
 checked for validity, but no warnings about weak cryptography are