diff --git a/net-doc/net/scribblings/win32-ssl.scrbl b/net-doc/net/scribblings/win32-ssl.scrbl
index 9bf1201d0f..04b3d3f494 100644
--- a/net-doc/net/scribblings/win32-ssl.scrbl
+++ b/net-doc/net/scribblings/win32-ssl.scrbl
@@ -13,16 +13,13 @@ OpenSSL libraries are installed.}
 @defproc[(win32-ssl-connect [hostname string?]
                             [port-no (integer-in 1 65535)]
                             [client-protocol
-                             (or/c 'sslv2-or-v3
-                                   'sslv2
-                                   'sslv3
-                                   'tls)
-                            'sslv2-or-v3])
+                             (or/c 'secure 'auto
+                                   'sslv2-or-v3 'sslv2 'sslv3 'tls 'tls11 'tls12)
+                             'auto])
          (values (and/c input-port? win32-ssl-port?)
                  (and/c output-port? win32-ssl-port?))]{
 
-Like @racket[ssl-connect], but without support for client contexts
-(which could enable certificate checking, for example).}
+Like @racket[ssl-connect], but without support for client contexts.}
 
 
 @defproc[(win32-ssl-abandon-port [in (and/c win32-ssl-port? output-port?)]) void?]{
@@ -33,11 +30,18 @@ Analogous to @racket[ssl-abandon-port].}
 @defproc[(ports->win32-ssl-ports
            [input-port input-port?]
 	   [output-port output-port?]
-	   [#:encrypt protocol (or/c 'sslv2-or-v3 'sslv2 'sslv3 'tls) 'sslv2-or-v3])
+	   [#:encrypt protocol (or/c 'secure 'auto
+                                     'sslv2-or-v3 'sslv2 'sslv3 'tls 'tls11 'tls12)]
+           [#:hostname hostname (or/c #f string?) #f])
          (values (and/c input-port? win32-ssl-port?)
                  (and/c output-port? win32-ssl-port?))]{
 
-Analogous to @racket[ports->ssl-ports].}
+Analogous to @racket[ports->ssl-ports].
+
+If hostname verification is enabled via @racket['secure], the peer
+server's certificate is checked against @racket[hostname].
+
+@history[#:changed "6.3.0.12" @elem{Added the @racket[#:hostname] argument.}]}
 
 
 @defproc[(win32-ssl-port? [v any/c]) boolean?]{