*** empty log message ***

diff --git a/doc/tex/ciphersuites.tex b/doc/tex/ciphersuites.tex
index 979cfb44797395508c597b1de1b78d445bfa9555..4899f59b0cccb471152338edc3ad2bc78ab1d431 100644 (file)
--- a/doc/tex/ciphersuites.tex
+++ b/doc/tex/ciphersuites.tex
@@ -26,6 +26,9 @@ in appendix \ref{ap:ciphersuites} on page \pageref{ap:ciphersuites}.
 \gnutls{} will disable ciphersuites that are not compatible with the key, or
 the enabled authentication methods.
 For example keys marked as sign-only, will not be able to
-access the plain RSA ciphersuites, but only the DHE\_RSA ones.
+access the plain RSA ciphersuites, but only the DHE\_RSA ones. It is
+recommended not to use RSA keys for both signing and encryption. If possible
+use the same key for the DHE\_RSA and RSA\_EXPORT ciphersuites, which use signing,
+and a different key for the plain RSA ciphersuites, which uses encryption.
 
 \addvspace{1.5cm}