Matthew Toseland wrote:
> Freenet 0.7 build 1010 is now available. This build fixes a serious
> security bug in our encryption code, affecting both link encryption and
> encryption of keys. Please upgrade immediately; it is a mandatory build
> as of now (meaning it will not connect to older builds). You will
> probably have to use the update script manually to do this; sorry for
> that, we *will* build an update-over-mandatory mechanism...
> Caveats:
> - All old KSKs are no longer retrievable.
> - You will need to generate a new SSK for your inserts to be encrypted
>   properly.
> Otherwise the new build is backwards compatible with existing content.
> So there is no need for a content reset. PLEASE UPGRADE!
> If you are inclined to forward this to slashdot, please wait 24 hours or
> so in case I missed any catastrophic bugs. And please listen out for new
> builds.

Special provision would have had to have been made if we had 
update-over-mandatory implemented since this appears to break 
connections even such that we won't have TOO OLD and TOO NEW with N2NTM 
support.
_______________________________________________
Devl mailing list
[email protected]
http://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to