NEWS: announce DNS-over-TLS too

diff --git a/NEWS b/NEWS
index c054a775d1b9d0943d3aafbc696ea077d72d5db0..44c57ef42a300124e6dbff01a567ceafe07d1f90 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -52,6 +52,12 @@ CHANGES WITH 239 in spe:
           configuration settings to change the resolution explicitly.
 
         * The elogind-resolve tool has been renamed to resolvectl (it also
+        * elogind-resolved now supports DNS-over-TLS ("PrivateDNS"). It's still
+          turned off by default, use PrivateDNS=yes to turn it on in
+          resolved.conf. We intend to make this the default as soon as couple
+          of additional techniques for optimizing the initial latency caused by
+          establishing a TLS/TCP connection are implemented.
+
           remains available under the old name, for compatibility), and its
           interface is now verb-based, similar in style to the other <xyz>ctl
           tools, such as systemctl or loginctl.
@@ -279,15 +285,6 @@ CHANGES WITH 239 in spe:
           query the default, built-in $PATH PID 1 will pass to the services it
           manages.
 
-        * A new unit file setting PrivateMounts= has been added. It's a boolean
-          option. If enabled the unit's processes are invoked in their own file
-          system namespace. Note that this behaviour is also implied if any
-          other file system namespacing options (such as PrivateTmp=,
-          PrivateDevices=, ProtectSystem=, …) are used. This option is hence
-          primarily useful for services that do not use any of the other file
-          system namespacing options. One such service is elogind-udevd.service
-          wher this is now used by default.
-
         Contributions from: Adam Duskett, Alan Jenkins, Alessandro Casale,
         Alexander Kurtz, Alex Gartrell, Anssi Hannula, Antique, Arnaud
         Rebillout, Brian J. Murrell, Bruno Vernay, Chris Lesiak, Christian