X-Git-Url: http://git.silcnet.org/gitweb/?p=website.git;a=blobdiff_plain;f=docs%2Fclient%2FReleaseNotes;h=4b5a5697981806e5b4aff69064db87ec872aba6b;hp=5716ca5987cbf97d6bb54920bea6adde242d87e6;hb=e228155f90da836c07017e4909e295ac584829f5;hpb=9000bdc758f37ee640c93b263e2e61e0f53b9429 diff --git a/docs/client/ReleaseNotes b/docs/client/ReleaseNotes index 5716ca5..4b5a569 100644 --- a/docs/client/ReleaseNotes +++ b/docs/client/ReleaseNotes @@ -1 +1,25 @@ -bar +SILC Client 1.1.10 +================== + +This version introduces a new default private message key protection +method by auto-negotiating private message key with SILC Key Exchange +protocol over the SILC network, client-to-client. The SKE is executed +by encapsulating it inside private messages. SKE results into secret +shared key between the two clients and all private messages are protected +with that key. This provides complete end-to-end protection for private +messages even if the SILC servers cannot be trusted. + +SILC Client will auto-negotiate the key when private message is sent +for the first time. Both users will be prompted to accept each others +public keys and once accpeted they are cached and subsequent verification +will be done automatically. It is important to verify the public key +to avoid the possibility of man-in-the-middle attacks. + +SILC Client automatically detects, within seconds, if the remote client +does not support the new method. User will receive a notification on +screen telling that the private messages will be protected using normal +session keys instead. This may happen also if an error occurs during +the key exchange protocol. + +This version also fixes numerous bugs that have been found using static +analysis tools.