diff --git a/changelog/unreleased/pull-315 b/changelog/unreleased/pull-315
new file mode 100644
index 0000000..9b36679
--- /dev/null
+++ b/changelog/unreleased/pull-315
@@ -0,0 +1,6 @@
+Enhancement: Hardened tls settings
+
+rest-server now uses a secure tls cipher suit set and the minimal TLS version
+can be set with the option `--tls-min-ver`
+
+https://github.com/restic/rest-server/pull/315