diff --git a/CHANGES b/CHANGES
index 007e5d2e32..b8cafb1958 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5276. [func] DNSSEC Lookaside Validation (DLV) is now obsolete;
+ all code enabling its use has been removed from the
+ validator, "delv", and the DNSSEC tools. [GL #7]
+
5275. [bug] Mark DS records included in referral messages
with trust level "pending" so that they can be
validated and cached immediately, with no need to
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 38b250662e..231d6fa66e 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -204,8 +204,13 @@
- The dnssec-lookaside option has been deprecated.
- The feature still works, but it is discouraged to use it. [GL #7]
+ DNSSEC Lookaside Validation (DLV) is now obsolete.
+ The dnssec-lookaside option has been
+ marked as deprecated; when used in named.conf,
+ it will generate a warning but will otherwise be ignored.
+ All code enabling the use of lookaside validation has been removed
+ from the validator, delv, and the DNSSEC tools.
+ [GL #7]
@@ -216,9 +221,7 @@
named will now log a warning if
- a static key is configured for the root zone, or if
- any key is configured for "dlv.isc.org", which has been shut
- down. [GL #6]
+ a static key is configured for the root zone. [GL #6]