diff --git a/Disable-registration-of-new-users.md b/Disable-registration-of-new-users.md
index 0eca93e..c125066 100644
--- a/Disable-registration-of-new-users.md
+++ b/Disable-registration-of-new-users.md
@@ -14,4 +14,4 @@ You can also disable registration except for email addresses from certain domain
 * `SIGNUPS_DOMAINS_WHITELIST=example.com` (single domain)
 * `SIGNUPS_DOMAINS_WHITELIST=example.com,example.net,example.org` (multiple domains)
 
-You still need to set `SIGNUPS_ALLOWED=false`. Also, see [#728](https://github.com/dani-garcia/bitwarden_rs/pull/728) for caveats.
\ No newline at end of file
+You still need to set `SIGNUPS_ALLOWED=false`. Also, see [#728](https://github.com/dani-garcia/bitwarden_rs/pull/728) for caveats -- in particular, the emails are currently not checked, meaning that anyone could still register, by providing a fake email address that has the proper domain.
\ No newline at end of file