diff --git a/CHANGES b/CHANGES
index 5a65d2a815..230d5ffcc5 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5538.	[func]		Add NSEC3 support for zones that manage DNSSEC with
+			the 'dnssec-policy' configuration. A new option
+			'nsec3param' can be used to set the NSEC3 parameters.
+			[GL #1620]
+
 5534.	[bug]		The synthesised CNAME from a DNAME was incorrectly
 			followed when the QTYPE was CNAME or ANY. [GL #2280]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index f13fae1d97..3fe2bdb747 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -36,6 +36,10 @@ Feature Changes
 
 - None.
 
+- Add NSEC3 support for zones that manage their DNSSEC with the `dnssec-policy`
+  configuration. A new option 'nsec3param' can be used to set the desired
+  NSEC3 parameters. [GL #1620].
+
 Bug Fixes
 ~~~~~~~~~