diff --git a/CHANGES b/CHANGES
index 2770543be5..75cda85117 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6126.	[cleanup]	Deprecate zone type "delegation-only" and the
+			"delegation-only" and "root-delegation-only"
+			options. [GL #3953]
+
 6125.	[bug]		Hold a catz reference while the update process is
 			running, so that the catalog zone is not destroyed
 			during shutdown until the update process is finished or
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 7267ffdd5d..6a63c53167 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -27,6 +27,16 @@ Removed Features
 
 - None.
 
+- Zone type ``delegation-only``, and the ``delegation-only`` and
+  ``root-delegation-only`` options, have been deprecated; a warning will
+  be logged when they are used.
+
+  These options were created to address the SiteFinder controversy, in
+  which certain top-level domains redirected misspelled queries to other
+  sites instead of returning NXDOMAIN responses. Since top-level domains are
+  now DNSSEC signed, and DNSSEC validation is active by default, the
+  options are no longer needed. :gl:`#3953`
+
 Feature Changes
 ~~~~~~~~~~~~~~~