diff --git a/README.md b/README.md
index c7fffdb..4980fdd 100644
--- a/README.md
+++ b/README.md
@@ -13,16 +13,17 @@ Website: [davidederosa.com][me-website]
 The client is known to work with [OpenVPN®][openvpn] 2.3+ servers. Key renegotiation and replay protection are also included, but full-fledged configuration files (.ovpn) are not currently supported.
 
 - [x] Handshake and tunneling over UDP or TCP
-- [x] Client-initiated renegotiation
-- [x] Replay protection (hardcoded window)
-- [x] Data encryption
+- [x] Ciphers
     - AES-CBC (128 and 256 bit)
     - AES-GCM (128 and 256 bit)
-- [x] HMAC digest
+- [x] HMAC digests
     - SHA-1
     - SHA-256
-- [x] TLS CA validation
-- [x] TLS client certificate validation
+- [x] TLS handshake
+    - CA validation
+    - Client certificate
+- [x] Key renegotiation (client-initiated)
+- [x] Replay protection (hardcoded window)
 
 The library does not currently support compression, so you must disable it server-side in order to avoid a confusing loss of data packets. The `TunnelKitProvider.Configuration.LZOFraming` option is deprecated and only provided for interoperability with `comp-lzo no`.