diff --git a/Cabal/src/Distribution/PackageDescription/Check/Warning.hs b/Cabal/src/Distribution/PackageDescription/Check/Warning.hs
index 4a587a8772f..778a89ddfbe 100644
--- a/Cabal/src/Distribution/PackageDescription/Check/Warning.hs
+++ b/Cabal/src/Distribution/PackageDescription/Check/Warning.hs
@@ -970,7 +970,8 @@ ppExplanation MissingLocation =
   "The source-repository 'location' is a required field."
 ppExplanation GitProtocol =
   "Cloning over git:// might lead to an arbitrary code execution "
-    ++ "vulnerability. Use https:// or ssh:// instead."
+    ++ "vulnerability. Furthermore, popular forges like GitHub do "
+    ++ "not support it. Use https:// or ssh:// instead."
 ppExplanation MissingModule =
   "For a CVS source-repository, the 'module' is a required field."
 ppExplanation MissingTag =
diff --git a/cabal-testsuite/PackageTests/Check/GitProtocol/cabal.out b/cabal-testsuite/PackageTests/Check/GitProtocol/cabal.out
index 1bc8481c2c0..eb61b32ab3e 100644
--- a/cabal-testsuite/PackageTests/Check/GitProtocol/cabal.out
+++ b/cabal-testsuite/PackageTests/Check/GitProtocol/cabal.out
@@ -1,5 +1,6 @@
 # cabal check
 The following errors are likely to affect your build negatively:
 Error: [git-protocol] Cloning over git:// might lead to an arbitrary code
-execution vulnerability. Use https:// or ssh:// instead.
+execution vulnerability. Furthermore, popular forges like GitHub do not
+support it. Use https:// or ssh:// instead.
 Error: Hackage would reject this package.