diff --git a/CHANGES b/CHANGES
index a76bad2c67..17f4f3a1f5 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,6 @@
-o
+
  322.	[bug]		Queries for KEY RRs are now sent to the parent 
-			server rather than the authoritative one, making
+			server before the authoritative one, making
 			DNSSEC insecurity proofs work in many cases
 			where they previously didn't.