fix a typo and clarify

diff --git a/doc/apps/ciphers.pod b/doc/apps/ciphers.pod
index c90484b70e0d82b11c74da42dbe71148f4fae4e4..b7e577b24f8db4ec7188a7da082bca3ef53f8146 100644 (file)
--- a/doc/apps/ciphers.pod
+++ b/doc/apps/ciphers.pod
@@ -110,9 +110,9 @@ specified.
 
 =item B<COMPLEMENTOFDEFAULT>
 
-the ciphers not enabled by default, currently being B<ADH>. This rule does not
-cover B<eNULL>, which is not included by B<ALL> and is therefore be handled by
-B<COMPLENETOFALL>.
+the ciphers included in B<ALL>, but not enabled by default. Currently
+this is B<ADH>. Note that this rule does not cover B<eNULL>, which is
+not included by B<ALL> (use B<COMPLEMENTOFALL> if necessary).
 
 =item B<ALL>