Update CHANGELOG.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3c16d6671f7a3478a0dd88f04f89ab862f131e78..b87a72456e8adc3edb7fdbd9c164104ad0c15560 100644 (file)
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
+TODO... writeup `truststore` switch & 3.10+ requirement.
+
 The 0.28 release includes a limited set of backwards incompatible changes.
 
 **Backwards incompatible changes**:
@@ -14,7 +16,7 @@ SSL configuration has been significantly simplified.
 
 * The `verify` argument no longer accepts string arguments.
 * The `cert` argument has now been removed.
-* The `SSL_CERT_FILE` and `SSL_CERT_DIR` environment variables are no longer automatically used.
+* The `SSL_CERT_FILE` and `SSL_CERT_DIR` environment variables are no longer automatically used. They can be enabled manually although should be obsoleted by our switch to `truststore`.
 
 For users of the standard `verify=True` or `verify=False` cases this should require no changes.