diff --git a/docs/manpages/virtproxyd.rst b/docs/manpages/virtproxyd.rst
index 814575e504..cb29ccbaad 100644
--- a/docs/manpages/virtproxyd.rst
+++ b/docs/manpages/virtproxyd.rst
@@ -73,6 +73,9 @@ Or
 
    $ systemctl start virtproxyd-tcp.socket
 
+**Note**: The TCP socket uses plain unencrypted TCP connection and thus is
+insecure and should not be used.
+
 
 Traditional service mode
 ------------------------