New stable version, based on 3.1.4
3.2.0: Stable (recommended)
2.4.0: Old stable
It is recommended to use the current stable version.
Things to watch out for when upgrading through the following versions:
3.1.2
-----
Blowfish has been deprecated by openssl.
Burp will now encrypt new files with AES-CBC-256, but will still be able
to decrypt files encrypted with blowfish as long as your openssl library
supports it.
The Windows installer will continue to come with openssl-1.1 for a few months,
to allow time for people to switch from blowfish.
3.1.0
-----
Protocol 2 has been removed.
It hasn't been progressing for a long time, and is mostly just a distraction.
So, I have made the decision to remove it.
2.5.0
-----
The Windows installer sets Administrator and SYSTEM full access permissions
only on:
C:/Program Files/Burp/bin/burp.conf
C:/Program Files/Burp/bin/ssl_cert_ca.pem
C:/Program Files/Burp/bin/ssl_cert-client.key
C:/Program Files/Burp/bin/ssl_cert-client.pem
That is, it runs:
icacls.exe "<path>" /inheritance:r /grant:r Administrators:F SYSTEM:F
If you have these files on non-default locations, and you are concerned about
restricting permissions, you may want to run the command by hand on them.
The Windows client will automatically apply the same permissions to new ssl
cert files on certificate exchange.