diff --git a/CHANGELOG.md b/CHANGELOG.md
index c41f019e..afbda692 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,7 @@
 ## 3.5.2.dev
 * Adjust: [auth] ldap: use ldap_user_attr either first element of list or directly 
 * Fix: use value of property for time range filter
+* Add: [auth] ldap: option ldap_security (none, startls, tls) for additional support of STARTTLS, deprecate ldap_use_ssl
 
 ## 3.5.1