diff --git a/appendices/transports.xml b/appendices/transports.xml
index ad183a8fec43..e49b4fd6b809 100644
--- a/appendices/transports.xml
+++ b/appendices/transports.xml
@@ -22,6 +22,13 @@
ssl://, tls://,
sslv2:// & sslv3://.
+
+
+ The sslv2:// and sslv3:// transports
+ are obsolete and should not be used. They are documented for
+ backward compatibility only.
+
+
@@ -38,8 +45,6 @@
tcp://www.example.com
udp://www.example.com
ssl://www.example.com
- sslv2://www.example.com
- sslv3://www.example.com
tls://www.example.com
@@ -78,11 +83,18 @@
- ssl:// will attempt to negotiate an SSL V2,
- or SSL V3 connection depending on the capabilities and preferences
- of the remote host. sslv2:// and
- sslv3:// will select the SSL V2 or SSL V3
- protocol explicitly.
+ ssl:// will attempt to negotiate a secure SSL/TLS
+ connection depending on the capabilities and preferences of both the
+ client and the remote host. The actual protocols that may be used are
+ determined by the OpenSSL configuration and by any options provided
+ through stream_context_create, such as
+ ssl.crypto_method.
+
+
+
+ The SSLv2 and SSLv3 protocols are obsolete and insecure. Their use is
+ strongly discouraged and they are no longer enabled by default in
+ modern versions of PHP and OpenSSL.