-** The GnuTLS library is now also supported for https downloads.
-This is still work-in-progress. OpenSSL is still used by default; use
---with-ssl=gnutls to build with GnuTLS. OpenSSL is still required for
-NTLM authorization to work, but this should eventually change.
+** The GnuTLS library is now also experimentally supported for https
+downloads. This is still work-in-progress. OpenSSL is still used by
+default; use --with-ssl=gnutls to build with GnuTLS. OpenSSL is still
+required for NTLM authorization to work, but this should eventually
+change. NOTE: Certificate verification is _not_ currently supported:
+this means that you can currently only use GnuTLS to encrypt
+connections, but _not_ to verify that a host is who it claims to be. Use
+of OpenSSL is suggested until this missing feature is implemented.