diff --git a/changes/bug4584 b/changes/bug4584
new file mode 100644
index 0000000000..38cf2d6da6
--- /dev/null
+++ b/changes/bug4584
@@ -0,0 +1,4 @@
+  o Privacy/anonymity features (bridge detection):
+    - Make bridge SSL certificates a bit more stealthy by using random
+      serial numbers, in the same fashion as OpenSSL when generating
+      self-signed certificates. Implements ticket 4584.