diff --git a/CHANGES b/CHANGES
index dc6429a66d..71b31cd4da 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5839.	[func]		Add support for remote TLS certificates
+			verification, both to BIND and dig, making it possible
+			to implement Strict and Mutual TLS authentication,
+			as described in RFC 9103, Section 9.3. [GL #3163]
+
 5838.	[cleanup]	When modifying a member zone in a catalog zone, and it
 			is detected that the zone exists and was not created by
 			the current catalog zone, distinguish the two cases when
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 16ec7999dd..ca90a971b9 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -60,6 +60,10 @@ New Features
   specify a journal file to read when loading the zone to be verified or
   signed. :gl:`#2486`
 
+- Add support for remote TLS certificates verification, both to BIND
+  and ``dig``, making it possible to implement Strict and Mutual TLS
+  authentication, as described in RFC 9103, Section 9.3. :gl:`#3163`
+
 Removed Features
 ~~~~~~~~~~~~~~~~