diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 7e6b907..db101a8 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -32,6 +32,8 @@
   :attr:`~cryptography.x509.RFC822Name.value` attribute was deprecated, users
   should use :attr:`~cryptography.x509.RFC822Name.bytes_value` to access the
   raw value.
+* Added :meth:`~cryptography.x509.CertificateRevocationList.is_signature_valid`
+  to :class:`~cryptography.x509.CertificateRevocationList`.
 
 
 .. _v2-0-3:
diff --git a/docs/x509/reference.rst b/docs/x509/reference.rst
index 47f7625..5e1c95c 100644
--- a/docs/x509/reference.rst
+++ b/docs/x509/reference.rst
@@ -567,6 +567,12 @@
 
         .. versionadded:: 2.1
 
+        .. warning::
+
+            Checking the validity of the signature on the CRL is insufficient
+            to know if the CRL should be trusted. More details are available
+            in :rfc:`5280`.
+
         Returns True if the CRL signature is correct for given public key,
         False otherwise.