diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index 46a624e864..429127893e 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -5218,10 +5218,10 @@ int mbedtls_ssl_close_notify(mbedtls_ssl_context *ssl);
  *                   same warnings apply to any use of the
  *                   early_exporter_master_secret.
  *
- *                 Mbed TLS does not implement one of the anti-replay defenses
+ * \warning        Mbed TLS does not implement any of the anti-replay defenses
  *                 defined in section 8 of the TLS 1.3 specification:
- *                 single-ticket use or ClientHello recording within a given
- *                 time window.
+ *                 single-use of tickets or ClientHello recording within a
+ *                 given time window.
  *
  * \note           This function is used in conjunction with
  *                 mbedtls_ssl_handshake(), mbedtls_ssl_handshake_step(),