diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3c16d667..b87a7245 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 
 ## [Unreleased]
 
+TODO... writeup `truststore` switch & 3.10+ requirement.
+
 The 0.28 release includes a limited set of backwards incompatible changes.
 
 **Backwards incompatible changes**:
@@ -14,7 +16,7 @@ SSL configuration has been significantly simplified.
 
 * The `verify` argument no longer accepts string arguments.
 * The `cert` argument has now been removed.
-* The `SSL_CERT_FILE` and `SSL_CERT_DIR` environment variables are no longer automatically used.
+* The `SSL_CERT_FILE` and `SSL_CERT_DIR` environment variables are no longer automatically used. They can be enabled manually although should be obsoleted by our switch to `truststore`.
 
 For users of the standard `verify=True` or `verify=False` cases this should require no changes.