diff --git a/.changes/http-dangerous-settings.md b/.changes/http-dangerous-settings.md
new file mode 100644
index 000000000..247032690
--- /dev/null
+++ b/.changes/http-dangerous-settings.md
@@ -0,0 +1,6 @@
+---
+"http": minor
+"http-js": minor
+---
+
+http new api to disable tls hostname/certificate validation