Add recommendation on HMAC

diff --git a/docs/client.rst b/docs/client.rst
index 75d5d917329fc71699009bf87f8c049fd19b5341..588229e7f0f38181b605dd3f64fabf8d6959f848 100644 (file)
--- a/docs/client.rst
+++ b/docs/client.rst
@@ -37,6 +37,12 @@ user or context.
 You SHOULD NOT call any other methods on the :class:`~fints.client.FinTS3Client` object
 after calling :func:`~fints.client.FinTS3Client.deconstruct`.
 
+.. warning::
+
+   The data bassed to :func:`~fints.client.FinTS3Client.set_data` **MUST NOT** be from an untrusted source.
+   Even if stored in a trusted location, we recommend using a HMAC or a similar mechanism to prevent unexpected
+   tampering.
+
 
 Keeping the dialog open
 -----------------------