more service security information

1 files changed, 3 insertions, 1 deletions

diff --git a/static/features.html b/static/features.html
index 07038922..d3722a70 100644
--- a/static/features.html
+++ b/static/features.html
@@ -187,7 +187,9 @@
                     <li>Authenticated encryption for all of our services</li>
                     <li>Strong cipher configurations for all of our services (SSH, TLS, etc.) with
                     only modern AEAD ciphers providing forward secrecy</li>
-                    <li>DNSSEC for all our domains</li>
+                    <li>Our web services uses OCSP stapling with Must-Staple</li>
+                    <li>DNSSEC implemented for all of our domains, which is particularly important
+                    for securing email due to it relying on DNS records</li>
                     <li>DANE TLSA records for pinning keys for all our TLS services (mostly helps
                     to secure email due to lack of browser support)</li>
                     <li>SSHFP across all domains for pinning SSH keys</li>