--- a/mercurial/help/urls.txt	Fri Oct 01 00:46:59 2010 +0200
+++ b/mercurial/help/urls.txt	Fri Oct 01 00:48:50 2010 +0200
@@ -18,6 +18,9 @@
 possible if the feature is explicitly enabled on the remote Mercurial
 server.
 
+Note that the security of HTTPS URLs depends on proper configuration of
+web.cacerts.
+
 Some notes about using SSH with Mercurial:
 
 - SSH requires an accessible shell account on the destination machine