diff --git a/core/nss/PKGBUILD b/core/nss/PKGBUILD
index 8a874ab5f..d32363bf8 100644
--- a/core/nss/PKGBUILD
+++ b/core/nss/PKGBUILD
@@ -2,13 +2,14 @@
 # Contributor: Jan de Groot <jgc@archlinux.org>
 
 # ALARM: Kevin Mihelich <kevin@archlinuxarm.org>
+#  - remove --target x64 from build.sh line
+#  - add -Ddisable_arm32_neon=1 -Ddisable_arm_hw_aes=1 to build.sh
 #  - remove -march=armv8-a in AArch64 CFLAGS to not conflict with -march=armv8-a+crypto being added
-#    this is a stupid, dirty hack that shouldn't be necessary
 
 pkgbase=nss
 pkgname=(nss ca-certificates-mozilla)
-pkgver=3.52.1
-pkgrel=2
+pkgver=3.53
+pkgrel=1
 pkgdesc="Network Security Services"
 url="https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS"
 arch=(x86_64)
@@ -19,7 +20,7 @@ source=("https://ftp.mozilla.org/pub/security/nss/releases/NSS_${pkgver//./_}_RT
         certdata2pem.py bundle.sh
         0001-Don-t-USE_ARM_GCM.patch
         0002-fix-armv8_c_lib-dependency.patch)
-sha256sums=('bcc81ac33aeb4ecad182dc21e34d2c97bcc148fd7b9e76f85bebb892405a9278'
+sha256sums=('08d36dc1a56325f02e626626d4eeab9c4d126dbd99dfaf419b91d0a696f58917'
             'd2a1579dae05fd16175fac27ef08b54731ecefdf414085c610179afcf62b096c'
             '3bfadf722da6773bdabdd25bdf78158648043d1b7e57615574f189a88ca865dd'
             'eccc7447d4fdbd1975bf65aef648df3a483d7bb4e458849ddd5dcaf4697771d2'
@@ -47,7 +48,14 @@ build() {
   ./bundle.sh
 
   cd nss-$pkgver/nss
-  ./build.sh -v --opt --system-sqlite --system-nspr --enable-libpkix --disable-tests -Ddisable_arm32_neon=1 -Ddisable_arm_hw_aes=1
+  ./build.sh \
+    --opt \
+    --system-sqlite \
+    --system-nspr \
+    --enable-libpkix \
+    --disable-tests \
+    -Ddisable_arm32_neon=1 \
+    -Ddisable_arm_hw_aes=1
 }
 
 package_nss() {
@@ -102,3 +110,5 @@ package_ca-certificates-mozilla() {
   install -Dm644 ca-bundle.trust.p11-kit \
     "$pkgdir/usr/share/ca-certificates/trust-source/mozilla.trust.p11-kit"
 }
+
+# vim:set sw=2 et: