CHANGES note

diff --git a/CHANGES b/CHANGES
index 8897c1d3470862ae3c21739c3b980379ec4d83da..d7abfabb05215fd43395442185cfd03aa3a74842 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5531.  [func]          Add a netmgr TLS layer, enabling server-side DoT
+                       support (not yet available), and client-side DoT
+                       support in dig with "dig +tls". [GL #1840]
+
 5530.  [bug]           DNSTAP did not capture responses to forwarded
                        UPDATE requests. [GL #2252]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index bdcad868bea36cf66eb9c3ea0001709458bbf6d5..a4ce7dfe8c74123463def3523499a8894f824d79 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -47,6 +47,12 @@ Feature Changes
   before they ever reach ``dig``.  Consequently, the option has been
   removed. [GL #2140]
 
+- Support for DNS over TLS (DoT) has been added to the network manager API, and
+  the support for DoT has been added to the ``dig`` tool and support for
+  listening on TLS port has been added to ``named``.  ``named`` could use a
+  certificate provided by the user or it can generate an ephemeral certificate
+  on startup of the daemon.
+
 Bug Fixes
 ~~~~~~~~~