diff --git a/NEWS b/NEWS
index 95f7e1c60..0f48bd276 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,12 @@
+strongswan-5.0.3
+----------------
+
+- The new ipseckey plugin enables authentication based on trustworthy public
+  keys stored as IPSECKEY resource records in the DNS and protected by DNSSEC.
+  To do so it uses a DNSSEC enabled resolver, like the one provided by the new
+  unbound plugin, which is based on libldns and libunbound.  Both plugins were
+  created by Reto Guadagnini.
+
 strongswan-5.0.2
 ----------------