diff --git a/docs/remote-cli.md b/docs/remote-cli.md
index adcced78..5ff2f4a0 100644
--- a/docs/remote-cli.md
+++ b/docs/remote-cli.md
@@ -5,7 +5,7 @@
 - A workstation to run `headscale` (could be Linux, macOS, other supported platforms)
 - A `headscale` server (version `0.13.0` or newer)
 - Access to create API keys (local access to the `headscale` server)
-- `headscale` _must_ be served over TLS/HTTPS
+- `headscale` _must_ be served over TLS/HTTPS with a _trusted_ certificate
   - Remote access does _not_ support unencrypted traffic.
 - Port `50443` must be open in the firewall (or port overriden by `grpc_listen_addr` option)