diff --git a/doc/Changelog b/doc/Changelog
index 2dfbdd386..a9c5ef94e 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,6 @@
+21 May 2013: Wouter
+	- Explain bogus and secure flags in libunbound more.
+
 16 May 2013: Wouter
 	- Fix#499 use-after-free in out-of-memory handling code (thanks Jake
 	  Montgomery).
diff --git a/doc/libunbound.3.in b/doc/libunbound.3.in
index ce9c059b3..2a4184f71 100644
--- a/doc/libunbound.3.in
+++ b/doc/libunbound.3.in
@@ -364,7 +364,7 @@ The result of the DNS resolution and validation is returned as
 .fi
 .P
 If both secure and bogus are false, security was not enabled for the 
-domain of the query.
+domain of the query.  Else, they are not both true, one of them is true.
 .SH "RETURN VALUES"
 Many routines return an error code. The value 0 (zero) denotes no error
 happened. Other values can be passed to