diff --git a/doc/Changelog b/doc/Changelog
index d79d388a2..4186cc1b2 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,6 +1,7 @@
 9 August 2018: Wouter
 	- unbound-checkconf checks if modules exist and prints if they are
 	  not compiled in the name of the wrong module.
+	- document --enable-subnet in doc/README.
 
 7 August 2018: Ralph
 	- Make capsforid fallback QNAME minimisation aware.
diff --git a/doc/README b/doc/README
index 1ae9f4f45..a10388867 100644
--- a/doc/README
+++ b/doc/README
@@ -76,6 +76,8 @@ The DNSTAP code has BSD license in dnstap/dnstap.c.
   	Disable support for RSASHA256 and RSASHA512 crypto.
   * --disable-gost
   	Disable support for GOST crypto, RFC 5933.
+  * --enable-subnet
+  	Enable EDNS client subnet processing.
 
 * 'make test' runs a series of self checks.