SHA-2 ciphersuites now require TLS 1.x
diff --git a/ChangeLog b/ChangeLog
index 536d829..58f8809 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -5,6 +5,10 @@
* Support escaping of commas in x509_string_to_names()
* Fix compile error in ssl_pthread_server (found by Julian Ospald).
+Changes
+ * Ciphersuites using SHA-256 or SHA-384 now require TLS 1.x (there is no
+ standard defining how to use SHA-2 with SSL 3.0).
+
= PolarSSL 1.3.8 released 2014-07-11
Security
* Fix length checking for AEAD ciphersuites (found by Codenomicon).