X-Git-Url: https://diplodocus.org/git/nmh/blobdiff_plain/2c785689e4a3163f6f1b644ec31c6a82642e9f14..2c4ac164edefd18861595ec7624e5ad344b10198:/docs/pending-release-notes

diff --git a/docs/pending-release-notes b/docs/pending-release-notes
index 5c256046..90b903a7 100644
--- a/docs/pending-release-notes
+++ b/docs/pending-release-notes
@@ -49,6 +49,8 @@ NEW FEATURES
 - folder(1) -nocreate now prints a warning message for a non-existent folder.
 - mhfixmsg(1) now allows -decodetext binary, though 8bit is still the default.
 - inc(1) and msgchk(1) now support TLS encryption natively.
+- All TLS connections now perform certificate validation (including hostname
+  matching) by default; can be disabled on a per-application basis.
 - Support for SMTPUTF8 (RFC 6531) has been added.  mhshow(1) already supported
   RFC 6532, assuming all 8-bit message header field bodies are UTF-8 and use
   of a UTF-8 locale.