diff --git a/CHANGELOG b/CHANGELOG
index fe8df02..e435fc8 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -10,6 +10,12 @@ version 2.79
 	recusion desired bit set, UNLESS acting as a authoritative
 	DNS server. This avoids a potential route to cache snooping.
 
+	Add support for Ed25519 signatures in DNSSEC validation.
+
+	No longer support RSA/MD5 signatures in DNSSEC validation,
+	since these are not secure. This behaviour is mandated in
+	RFC-6944.
+
 
 version 2.78
         Fix logic of appending ".<layer>" to PXE basename. Thanks to Chris