Merge pull request #1218 from Ayrx/update-security-doc
Update security.rst to note that we statically link OpenSSL now.
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index a49f3f4..b7506b2 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -11,6 +11,10 @@
truncation of tags by default. Previous versions of ``cryptography`` allowed
tags to be truncated by default, applications wishing to preserve this
behavior (not recommended) can pass the ``min_tag_length`` argument.
+* Windows builds now statically link OpenSSL by default. When installing a
+ wheel on Windows you no longer need to install OpenSSL separately. Windows
+ users can switch between static and dynamic linking with an environment
+ variable. See :doc:`/installation` for more details.
* Added :class:`~cryptography.hazmat.primitives.kdf.hkdf.HKDFExpand`.
* Added :class:`~cryptography.hazmat.primitives.ciphers.modes.CFB8` support
for :class:`~cryptography.hazmat.primitives.ciphers.algorithms.AES` and