diff --git a/CHANGES.md b/CHANGES.md
index f946d33..2aaa6a7 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,3 +1,16 @@
+# pizauth 1.0.6 (2024-11-10)
+
+* Support HTTPS redirects. pizauth now starts, by default, both HTTP and HTTPS
+  servers, generating a new self-signed HTTPS certificate on each invocation.
+
+  `pizauth info` shows you the certificate hash so you can verify that your
+  browser is connecting to the right HTTPS server. You can turn either (but
+  not both!) of the HTTP and HTTPS servers off with `http_listen=off` or
+  `https_listen=off`. This is most useful if you want to force HTTPS redirects
+  and ensure that you're not accidentally being redirected to an HTTP URL (i.e.
+  `http_listen=off` is the option you are most likely to be interested in).
+
+
 # pizauth 1.0.5 (2024-07-27)
 
 * Use `XDG_RUNTIME_DIR` instead of `XDG_DATA_HOME` for the socket path.
diff --git a/Cargo.lock b/Cargo.lock
index 14e528e..e09c35b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -788,7 +788,7 @@ checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e"
 
 [[package]]
 name = "pizauth"
-version = "1.0.5"
+version = "1.0.6"
 dependencies = [
  "base64",
  "bincode",
diff --git a/Cargo.toml b/Cargo.toml
index afdf002..23c2607 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "pizauth"
 description = "Command-line OAuth2 authentication daemon"
-version = "1.0.5"
+version = "1.0.6"
 repository = "https://github.com/ltratt/pizauth/"
 authors = ["Laurence Tratt <laurie@tratt.net>"]
 readme = "README.md"