diff --git a/homepage/knowledge/netbsd/index.html b/homepage/knowledge/netbsd/index.html
index eb9e151..9a92fe0 100644
--- a/homepage/knowledge/netbsd/index.html
+++ b/homepage/knowledge/netbsd/index.html
@@ -18,10 +18,17 @@
 <H3>updated 2021-07-14</H3>
 <HR ALIGN="left" SIZE="1" WIDTH="25%" />
 <H2>Fix <CODE>SSL certificate problem: unable to get local issuer certificate</CODE></H2>
+<P>Install <CODE>security/mozilla-rootcerts-openssl</CODE>.</P>
+<P>Sources:</P>
+<UL>
+<LI><A HREF="https://www.cambus.net/installing-ca-certificates-on-netbsd/">Frederic Cambus</A></LI>
+<LI><A HREF="https://github.com/ohmyzsh/ohmyzsh/issues/8321#issuecomment-863493503">ohmyzsh/ohmyzsh#8321</A></LI>
+</UL>
 <P>
-Install <CODE>security/mozilla-rootcerts-openssl</CODE>.
-(<A HREF="https://github.com/ohmyzsh/ohmyzsh/issues/8321#issuecomment-863493503">Source</A>.)
+<I>Do not</I> use SSL workarounds like (in the case of git) <CODE>GIT_SSL_NO_VERIFY</CODE>.
+These leave your system open to man-in-the-middle attacks.
 </P>
+<P>Related: <A HREF="http://mail-index.netbsd.org/pkgsrc-users/2021/07/19/msg034147.html">Depending on security/ca-certificates?</A></P>
 <H2>Mounting ext4 partitions with FUSE</H2>
 <P>
 I don't know that this is documented in either the NetBSD guide or wiki.