X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=doc%2Ftinc.texi;h=0c2f8c055cf6542142c177b1e1f4d79633b691b7;hp=987c36ea83cc5bd10cd5819d72a916e6d9fc8ca0;hb=e88b3fb52fb375cd8ab233a671f38ed2240ed828;hpb=87f96aec8c48327d879c20ff2b789c88a675173d

diff --git a/doc/tinc.texi b/doc/tinc.texi
index 987c36ea..0c2f8c05 100644
--- a/doc/tinc.texi
+++ b/doc/tinc.texi
@@ -1048,9 +1048,11 @@ Incoming packets that are meant for another node are forwarded by tinc internall
 This is the default mode, and unless you really know you need another forwarding mode, don't change it.
 
 @item kernel
-Incoming packets are always sent to the TUN/TAP device, even if the packets are not for the local node.
+Incoming packets using the legacy protocol are always sent to the TUN/TAP device,
+even if the packets are not for the local node.
 This is less efficient, but allows the kernel to apply its routing and firewall rules on them,
 and can also help debugging.
+Incoming packets using the SPTPS protocol are dropped, since they are end-to-end encrypted.
 @end table
 
 @cindex Hostnames