diff --git a/ChangeLog b/ChangeLog
index 28aaf6091..3e7f20152 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -37,6 +37,10 @@
    - otto@cvs.openbsd.org 2008/06/11 23:02:22
      [key.c]
      simpler way of computing the augmentations; ok grunk@
+   - grunk@cvs.openbsd.org 2008/06/11 23:03:56
+     [ssh_config.5]
+     CheckHostIP set to ``fingerprint'' will display both hex and random art
+     spotted by naddy@
 
 20080611
  - (djm) [channels.c configure.ac]
@@ -4199,4 +4203,4 @@
    OpenServer 6 and add osr5bigcrypt support so when someone migrates
    passwords between UnixWare and OpenServer they will still work. OK dtucker@
 
-$Id: ChangeLog,v 1.4972 2008/06/12 18:43:51 dtucker Exp $
+$Id: ChangeLog,v 1.4973 2008/06/12 18:44:25 dtucker Exp $
diff --git a/ssh_config.5 b/ssh_config.5
index 28ac724c8..8bcf323cc 100644
--- a/ssh_config.5
+++ b/ssh_config.5
@@ -34,7 +34,7 @@
 .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.\" $OpenBSD: ssh_config.5,v 1.107 2008/06/11 21:01:35 grunk Exp $
+.\" $OpenBSD: ssh_config.5,v 1.108 2008/06/11 23:03:56 grunk Exp $
 .Dd $Mdocdate: June 11 2008 $
 .Dt SSH_CONFIG 5
 .Os
@@ -162,7 +162,8 @@ file.
 This allows ssh to detect if a host key changed due to DNS spoofing.
 If the option is set to
 .Dq fingerprint ,
-not only the host IP address will be checked, but also an ASCII art
+not only the host IP address will be checked, but also a fingerprint
+along with an ASCII art
 representation of the key will be printed.
 If the option is set to
 .Dq no ,