From db33a77613e5be9c92ebe2b2d5dd2c9184ad9324 Mon Sep 17 00:00:00 2001 From: Daniel McCarney Date: Mon, 16 Oct 2023 15:12:13 -0400 Subject: [PATCH] docs: clarify trust anchor notes in verifying section --- README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 1d5a7cad..d631696b 100644 --- a/README.md +++ b/README.md @@ -203,9 +203,10 @@ client hellos are usually only a few hundred bytes. #### Verifying TLS certificates -By default, rustls does not load any TLS certificates, not even the system -store, which means that TLS certificate verification will fail by default. You -are responsible for loading certificates using one of the following methods: +By default, rustls does not load any trust anchors (root certificates), not even +the system trust anchor store, which means that TLS certificate verification will +fail by default. You are responsible for loading certificates using one of the +following methods: - `rustls_root_cert_store_add_pem`, which adds a single certificate to a root store