Update what's new

diff --git a/Doc/whatsnew/3.2.rst b/Doc/whatsnew/3.2.rst
index 4972e9f8b04f7a999698d1884d617185641105e3..97a169609ed3f661b3330ced4e608ce25a0a3489 100644 (file)
--- a/Doc/whatsnew/3.2.rst
+++ b/Doc/whatsnew/3.2.rst
@@ -403,6 +403,11 @@ New, Improved, and Deprecated Modules
   :meth:`~ssl.SSLContext.wrap_socket` method allows to create an SSL socket from
   such an SSL context.  (Added by Antoine Pitrou; :issue:`8550`.)
 
+  A new function, :func:`ssl.match_hostname`, helps implement server identity
+  verification for higher-level protocols by implementing the rules of
+  HTTPS (from :rfc:`2818`), which are also suitable for other protocols.
+  (Added by Antoine Pitrou, :issue:`1589`).
+
   The :func:`ssl.wrap_socket` constructor function now takes a *ciphers*
   argument that's a string listing the encryption algorithms to be allowed; the
   format of the string is described `in the OpenSSL documentation