diff --git a/CHANGELOG.md b/CHANGELOG.md
index c54a5a8c..bb6780a4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,11 @@ This project adheres to [Semantic Versioning](http://semver.org/). For the purpo
 ## Unreleased
 Initial release of Oragono!
 
+### Security
+* PROXY command is now restricted appropriately.
+* Nicknames, usernames and channel names that break the protocol are no longer allowed.
+* Default channel modes set to restrict new channels more appropriately by default.
+
 ### Added
 * Added YAML config file format.
 * Added native SSL/TLS support (thanks to @edmand).
diff --git a/README.md b/README.md
index 876d60c6..df2a8943 100644
--- a/README.md
+++ b/README.md
@@ -52,6 +52,7 @@ oragono run
 * Jeremy Latt, creator of Ergonomadic, <https://github.com/jlatt>
 * Edmund Huber, maintainer of Ergonomadic, <https://github.com/edmund-huber>
 * Niels Freier, added WebSocket support to Ergonomadic, <https://github.com/stumpyfr>
+* Daniel Oakley, maintainer of Oragono, <https://github.com/DanielOaks>
 * apologies to anyone I forgot.
 
 [go-crypto]: https://godoc.org/golang.org/x/crypto