diff --git a/ChangeLog b/ChangeLog
index 87768ff1a..c242d1f27 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -61,6 +61,8 @@ Changes
      naming collision in projects which also have files with the common name
      net.c. For consistency, the corresponding header file, net.h, is marked as
      deprecated, and its contents moved to net_sockets.h.
+   * Changed the strategy for X.509 certificate parsing and validation, to no
+     longer disregard certificates with unrecognised fields.
 
 = mbed TLS 2.3.0 branch released 2016-06-28