1 files changed, 6 insertions, 0 deletions
diff --git a/UPDATING b/UPDATING
index ae92e96..887f869 100644
--- a/UPDATING
+++ b/UPDATING
@@ -31,6 +31,12 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 10.x IS SLOW:
 	disable the most expensive debugging functionality run
 	"ln -s 'abort:false,junk:false' /etc/malloc.conf".)
 
+20130911:
+	OpenSSH is now built with DNSSEC support, and will by default
+	silently trust signed SSHFP records.  This can be controlled with
+	the VerifyHostKeyDNS client configuration setting.  DNSSEC support
+	can be disabled entirely with the WITHOUT_LDNS option in src.conf.
+
 20130906:
 	The GNU Compiler Collection and C++ standard library (libstdc++)
 	are no longer built by default on platforms where clang is the system