diff --git a/requirements.md b/requirements.md
new file mode 100755
index 00000000..2b4ff813
--- /dev/null
+++ b/requirements.md
@@ -0,0 +1,11 @@
+---
+layout: default
+title: Requirements
+permalink: /requirements/
+---
+
+# Requirements
+
+In order to prevent man-in-the-middle attacks, the authorization server MUST require the use of TLS with server authentication as defined by [RFC2818](https://tools.ietf.org/html/rfc2818) for any request sent to the authorization and token endpoints.  The client MUST validate the authorization server's TLS certificate as defined by [RFC6125](https://tools.ietf.org/html/rfc6125) and in accordance with its requirements for server identity authentication.
+
+This library uses key cryptography in order to encrypt and decrypt, as well as verify the integrity of signatures. See the [installation](/installation) page for details on how to generate the keys.
\ No newline at end of file