diff --git a/doc/Changelog b/doc/Changelog
index 9ee6cb6e9..1101ec967 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -3,6 +3,7 @@
 	- asynclook -c (cancel) feature.
 	- fix fail to allocate context actions.
 	- make pipe nonblocking at start.
+	- update plane for retry mode with caution to limit bandwidth.
 
 23 January 2008: Wouter
 	- removed debug prints from if-auto, verb-algo enables some.
diff --git a/doc/plan b/doc/plan
index e82b3f765..548b031b2 100644
--- a/doc/plan
+++ b/doc/plan
@@ -250,6 +250,8 @@ X make overload mode work; phase 0 all ok, phase 1 some threads close ports,
 * private TTL, dTLS features.
 * retry-mode, where a bogus result triggers a retry-mode query, where a list
   of responses over a time interval is collected, and each is validated.
+  or try in TCP mode. Do not 'try all servers several times', since we must
+  not create packet storms with operator errors.
 * draft-timers, DLV features.
 
 treeshrew/