add an explanation and fix a typo

1 files changed, 5 insertions, 1 deletions

diff --git a/CHANGES b/CHANGES
index ff7e676a8e..06e5677a66 100644
--- a/CHANGES
+++ b/CHANGES
@@ -101,9 +101,13 @@
  
  Changes between 0.9.6e and 0.9.7  [XX xxx 2002]
 
-  *) Add cipher selection rules COMPLEMENTOFALL and COMPLENENTOFDEFAULT
+  *) Add cipher selection rules COMPLEMENTOFALL and COMPLEMENTOFDEFAULT
      to allow version independent disabling of normally unselected ciphers,
      which may be activated as a side-effect of selecting a single cipher.
+
+     (E.g., cipher list string "RSA" enables ciphersuites that are left
+     out of "ALL" because they do not provide symmetric encryption.
+     "RSA:!COMPLEMEMENTOFALL" avoids these unsafe ciphersuites.)
      [Lutz Jaenicke, Bodo Moeller]
 
   *) Add appropriate support for separate platform-dependent build