diff --git a/static/features.html b/static/features.html
index 07038922..d3722a70 100644
--- a/static/features.html
+++ b/static/features.html
@@ -187,7 +187,9 @@
Authenticated encryption for all of our services
Strong cipher configurations for all of our services (SSH, TLS, etc.) with
only modern AEAD ciphers providing forward secrecy
- DNSSEC for all our domains
+ Our web services uses OCSP stapling with Must-Staple
+ DNSSEC implemented for all of our domains, which is particularly important
+ for securing email due to it relying on DNS records
DANE TLSA records for pinning keys for all our TLS services (mostly helps
to secure email due to lack of browser support)
SSHFP across all domains for pinning SSH keys