diff --git a/doc/ezstream.1.in.in b/doc/ezstream.1.in.in
index f05c028..f61b26a 100644
--- a/doc/ezstream.1.in.in
+++ b/doc/ezstream.1.in.in
@@ -232,8 +232,8 @@ active attackers.
 .It Sy \&<tls_cipher_suite\ /\&>
 Configure allowed cipher suites for TLS.
 .Pp
-For example (modern cipher suites, PFS, no deprecated algorithms):
-.Sy HIGH:!kRSA:!kECDH:!DH:!PKS:!aNULL:!eNULL:!3DES:!MD5:!SHA:!TLSv1 .
+For example (modern cipher suites, PFS, TLS 1.2 or better):
+.Sy HIGH:!RSA:!SHA:!DH:!aNULL:!eNULL:!TLSv1 .
 .Pp
 Default:
 .Em libshout default cipher suite
diff --git a/examples/ezstream-full.xml b/examples/ezstream-full.xml
index 8392952..b8040d3 100644
--- a/examples/ezstream-full.xml
+++ b/examples/ezstream-full.xml
@@ -45,7 +45,7 @@
         Configure allowed cipher suites for TLS other than the libshout default.
         See openssl(1)/ciphers(1) for details.
         -->
-      <tls_cipher_suite>HIGH:!kRSA:!kECDH:!DH:!PKS:!aNULL:!eNULL:!3DES:!MD5:!SHA:!TLSv1</tls_cipher_suite>
+      <tls_cipher_suite>HIGH:!RSA:!SHA:!DH:!aNULL:!eNULL:!TLSv1</tls_cipher_suite>
 
       <!--
         Directory to use for server certificate verification in "hash format".