From: Nick Mathewson <nickm@torproject.org>
Date: Mon, 17 Mar 2025 14:41:25 +0000 (-0400)
Subject: Changes file for removing RSA-SHA256-TLSSecret.
X-Git-Tag: tor-0.4.9.2-alpha~30^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d83fcbf28caf6d64c9593a1b706bf5eb0c944534;p=thirdparty%2Ftor.git

Changes file for removing RSA-SHA256-TLSSecret.

Closes #41020.
---

diff --git a/changes/too_many_tlssecrets b/changes/too_many_tlssecrets
new file mode 100644
index 0000000000..d1748e6f03
--- /dev/null
+++ b/changes/too_many_tlssecrets
@@ -0,0 +1,6 @@
+  o Removed features:
+    - Relays no longer support the obsolete "RSA-SHA256-TLSSecret"
+      authentication method, which used a dangerously short RSA key,
+      and which required access TLS session internals. The current method
+      ("Ed25519-SHA256-RFC5705") has been supported since 0.3.0.1-alpha.
+      Closes ticket 41020.