diff --git a/modules/release-notes/pages/developers.adoc b/modules/release-notes/pages/developers.adoc
index 11ba5ce..6cfae14 100644
--- a/modules/release-notes/pages/developers.adoc
+++ b/modules/release-notes/pages/developers.adoc
@@ -182,3 +182,9 @@ The `async-std` Rust crate is no longer maintained and is now considered depreca
 === gtk3-rs, gtk-rs-core v0.18, and gtk4-rs v0.7 are now removed
 The Rust bindings for GTK3 (and related libraries) were marked as deprecated in Fedora 43 due to lack of upstream maintenance.
 In Fedora 43, they are completely removed.
+
+[[debuginfod-ima-verification]]
+== Debuginfod IMA verification
+The `debuginfod` client tools used to auto-download debuginfo & source code into tools like `gdb` now cryptographically verify the integrity of the downloaded files from the Fedora debuginfod server. 
+This setting is appropriate for normal Fedora koji-signed release/update RPMs. 
+However if your workflow also involves unsigned flatpak RPMs (`++%dist ".fc#app#"++`), then you may need to manually remove `ima:enforcing` from your `$DEBUGINFOD_URLS`.