-.\" $OpenBSD: starttls.8,v 1.22 2015/12/24 16:54:37 mmcc Exp $
+.\" $OpenBSD: starttls.8,v 1.23 2017/06/22 13:51:49 jmc Exp $
.\"
.\" Copyright (c) 2001 Jose Nazario <jose@monkey.org>
.\" All rights reserved.
.\" OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: December 24 2015 $
+.Dd $Mdocdate: June 22 2017 $
.Dt STARTTLS 8
.Os
.Sh NAME
.Pp
Because TLS can only authenticate at the server level, true
end-to-end authentication of the mail message cannot be performed with
-only the use of STARTLS on the server.
+only the use of STARTTLS on the server.
The use of S/MIME or PGP email and trustworthy key hierarchies can guarantee
full confidentiality and integrity of the entire message path.
.Pp