From 89eed3d0b217cbdc8c1a8409e5dbe24f5d45d44d Mon Sep 17 00:00:00 2001
From: Evan Hunt <each@isc.org>
Date: Mon, 11 Mar 2019 19:19:20 -0700
Subject: [PATCH] CHANGES, release note

---
 CHANGES           | 4 ++++
 doc/arm/notes.xml | 4 +++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 25c8dd7dc3..de4307c506 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5188.	[func]		The "dnssec-enable" option is deprecated and no
+			longer has any effect; DNSSEC responses are
+			always enabled. [GL #866]
+
 5187.	[test]		Set time zone before running any tests in dnstap_test.
 			[GL #940]
 
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 5d1a0e0792..9b02ca64ac 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -110,7 +110,9 @@
     <itemizedlist>
       <listitem>
 	<para>
-	  None.
+	  The <command>dnssec-enable</command> option has been deprecated and
+	  no longer has any effect. DNSSEC responses are always enabled
+	  if signatures and other DNSSEC data are present. [GL #866]
 	</para>
       </listitem>
     </itemizedlist>