Update doc for ssl_conf_renegotiation
diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index 3997b4d..e77b412 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -1778,9 +1778,13 @@
* initiated by peer
* (Default: MBEDTLS_SSL_RENEGOTIATION_DISABLED)
*
- * Note: A server with support enabled is more vulnerable for a
- * resource DoS by a malicious client. You should enable this on
- * a client to enable server-initiated renegotiation.
+ * \warning It is recommended to always disable renegotation unless you
+ * know you need it and you know what you're doing. In the
+ * past, there has been several issues associated with
+ * renegotiation or a poor understanding of its properties.
+ *
+ * \note Server-side, enabling renegotiation also makes the server
+ * susceptible to a resource DoS by a malicious client.
*
* \param conf SSL configuration
* \param renegotiation Enable or disable (MBEDTLS_SSL_RENEGOTIATION_ENABLED or