diff --git a/static/features.html b/static/features.html
index 2f55dee3..78cbc851 100644
--- a/static/features.html
+++ b/static/features.html
@@ -171,7 +171,8 @@
                     of our web services, etc.</li>
                     <li>No proprietary services</li>
                     <li>Authenticated encryption for all of our services</li>
-                    <li>Strong cipher configurations for all of our services (SSH, TLS, etc.)</li>
+                    <li>Strong cipher configurations for all of our services (SSH, TLS, etc.) with
+                    only modern AEAD ciphers providing forward secrecy</li>
                     <li>DNSSEC for all our domains</li>
                     <li>SSHFP across all domains for pinning SSH keys</li>
                     <li>DANE TLSA records for pinning keys for all our TLS services (unfortunately only