diff --git a/utils/common/src/main/java/org/apache/brooklyn/util/crypto/SslTrustUtils.java b/utils/common/src/main/java/org/apache/brooklyn/util/crypto/SslTrustUtils.java
index 63df86e73f..d3941372d2 100644
--- a/utils/common/src/main/java/org/apache/brooklyn/util/crypto/SslTrustUtils.java
+++ b/utils/common/src/main/java/org/apache/brooklyn/util/crypto/SslTrustUtils.java
@@ -39,7 +39,7 @@ public static <T extends URLConnection> T trustAll(T connection) {
         return connection;
     }
     
-    /** trusts all SSL certificates */
+    /** trusts all SSL certificates, it is not secure*/
     public static final TrustManager TRUST_ALL = new X509TrustManager() {
         @Override
         public X509Certificate[] getAcceptedIssuers() {