1 files changed, 6 insertions, 0 deletions
diff --git a/Changelog b/Changelog
index 341d5f7..e400b37 100644
--- a/Changelog
+++ b/Changelog
@@ -1,5 +1,11 @@
 interimap (0.5.3) upstream;
 
+ * libinterimap: SSL_fingerprint now supports a space-separate list of
+   digests to pin, and succeeds if, and only if, the peer certificate
+   SPKI matches one of the pinned digest values.  Specifying multiple
+   digest values can key useful in key rollover scenarios and/or when
+   the server supports certificates of different types (for instance
+   RSA+ECDSA).
  - libinterimap: 'null-stderr' is now ignored when the 'debug' flag is
     set (the standard error is never sent to /dev/null).
  - test suite: use a RSA certificate rather than ECDSA.