From d83fcbf28caf6d64c9593a1b706bf5eb0c944534 Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Mon, 17 Mar 2025 10:41:25 -0400 Subject: [PATCH] Changes file for removing RSA-SHA256-TLSSecret. Closes #41020. --- changes/too_many_tlssecrets | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 changes/too_many_tlssecrets diff --git a/changes/too_many_tlssecrets b/changes/too_many_tlssecrets new file mode 100644 index 0000000000..d1748e6f03 --- /dev/null +++ b/changes/too_many_tlssecrets @@ -0,0 +1,6 @@ + o Removed features: + - Relays no longer support the obsolete "RSA-SHA256-TLSSecret" + authentication method, which used a dangerously short RSA key, + and which required access TLS session internals. The current method + ("Ed25519-SHA256-RFC5705") has been supported since 0.3.0.1-alpha. + Closes ticket 41020. -- 2.47.3