SHA-2 ciphersuites now require TLS 1.x
diff --git a/ChangeLog b/ChangeLog
index 536d829..58f8809 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,10 @@
    * Support escaping of commas in x509_string_to_names()
    * Fix compile error in ssl_pthread_server (found by Julian Ospald).
 
+Changes
+   * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x (there is no
+     standard defining how to use SHA-2 with SSL 3.0).
+
 = PolarSSL 1.3.8 released 2014-07-11
 Security
    * Fix length checking for AEAD ciphersuites (found by Codenomicon).