diff --git a/dist/CHANGES.txt b/dist/CHANGES.txt
index 21fa64296..00b837f04 100644
--- a/dist/CHANGES.txt
+++ b/dist/CHANGES.txt
@@ -1,5 +1,19 @@
 CHANGES
 
+<master>
+- On-demand TLS can obtain certificates during handshake
+- Built with Go 1.6
+- Process log (-log) is rotated when it gets large
+- fastcgi: Allow scheme prefix before address
+- markdown: Support for definition lists
+- proxy: Allow proxy to insecure HTTPS backends
+- proxy: Support proxy to unix socket
+- templates: New .Markdown action to interpret included file as Markdown
+- tls: max_certs setting to set hard limit on-demand TLS
+- tls: load certificates from directory
+- Multiple bug fixes and internal changes
+
+
 0.8.1 (January 12, 2016)
 - Improved OCSP stapling
 - Better graceful reload when new hosts need certificates from Let's Encrypt
@@ -14,6 +28,7 @@ CHANGES
 - tls: No longer allow HTTPS over port 80
 - Dozens of bug fixes, improvements, and more tests across the board
 
+
 0.8.0 (December 4, 2015)
 - HTTPS by default via Let's Encrypt (certs & keys are fully managed)
 - Graceful restarts (on POSIX-compliant systems)