The major network structure change in this release is preferential
opennet peer acceptance based on link length. The Roos, Schiller,
Hacker, and Strufe paper reports far too many long links. [0] The
statistics we've been collecting observe this as well. This release
accepts comparatively few long links, which should allow much better
navigation of the local keyspace. This will result in rejecting more
connections offered over announcement, so in a future version
announcements may indicate link length preference to lessen the load.

Matthew speculates that this will not interact well with the existing
behavior, so it will be mandatory 2014-08-16.

Java 6 has been EOL since February 2013. [1] This release adds an alert
when running with Java earlier than 1.7. [2] Freenet will require Java
1.7 or later in a future release.

Also in this release:

* Add Russian Windows installer translation. Thanks zabuldon! If you
  want to give a translation for another language please do so; the
  English source file is here: [2] In addition to Russian there are
  currently translations for Spanish, French, and Dutch.
* Update German, Finnish, French, Japanese, Dutch, Brazilian
  Portuguese, and Simplified Chinese translations thanks to volunteers
  on Transifex.
* Add permissions attribute to main jar manifest.
* Allow building with Bouncy Castle 1.50 and higher. 1.49 had a draft
  implementation of OCBBlockCipher, and an updated draft in 1.50
  limited the nonce size below what Freenet was using. Bouncy Castle
  1.51 will be deployed in a future release.
* Add X-Content-Type-Options nosniff header. This requests that
  browsers treat files as their given MIME types and not guess based on
  their content. As Microsoft explains, "[it] is a security feature
  that helps prevent attacks based on MIME-type confusion." [3]
* Disable negtypes before 9. Negtype 9 has been mandatory since build
  1448 went mandatory on July 23rd, 2013. Future releases will remove
  the code for these unused negtypes.
* Remove :visited from CSS to prevent pages from appearing differently
  based on browser history, which is useful in attacks. [4]
* Clean up CSS filter.
* Add documentation.
* Code cleanup.
* Update seed nodes. Thanks justusranvier and Stanley!

- Steve Dougherty

[0] https://freenetproject.org/papers/roos-pets2014.pdf
[1] http://www.oracle.com/technetwork/java/javase/eol-135779.html
[2] https://github.com/freenet/fred/pull/269
[3] http://msdn.microsoft.com/en-us/library/ie/gg622941%28v=vs.85%29.aspx
[4] http://lcamtuf.coredump.cx/css_calc/

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Devl mailing list
Devl@freenetproject.org
https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl

Reply via email to