For the most part, I am able to distinguish between functional and non-functional requirements, but at times it is not clear for me.
For example, the following are non-functional but they seem functional to me:
The software must use SSL encryption for transmissions
Or
The software must store the configurations in an XML file
Could you please help me with a rule of thumb that helps me make the distinction? Many thanks!