diff --git a/Dockerfile b/Dockerfile
index a86a6f0..88f81fc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 ###############################################################################
 # BUILD STAGE
 
-FROM golang:1.11-alpine
+FROM golang:1.12-alpine
 
 RUN set -x \
   && apk --no-cache --update add \
diff --git a/README.md b/README.md
index 38ee12d..f7334a4 100644
--- a/README.md
+++ b/README.md
@@ -157,6 +157,11 @@ suspicion that some ISPs start to filter MTPROTO traffic. If they detect
 the IP address which acts as a proxy, they block it and no clients can
 use this proxy. This is an attempt to prevent such a situation.
 
+General rule of thumb: with all new installation of proxies I would
+advise to go with secure mode by default. But please do remember that it
+means that clients, which do not pass dd-prefix to their secrets, will
+not be able to connect. *Secure mode works only with dd-prefixes!*
+
 Oneliners to generate such secrets:
 
 ```console