github refraction-networking/utls v1.3.0
v1.3.0 Update: Security, and Compatibility

latest releases: v1.8.2, v1.8.1, v1.8.0...
3 years ago

What's Changed

  • build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 by @dependabot in #165
  • crypto/tls: reject change_cipher_spec record after handshake in TLS 1.3 by @RPRX in #170
  • crypto/tls: set const maxUselessRecords to 32 (the same with OpenSSL) by @RPRX in #171
  • Sync with upstream: Go 1.19.6 (no new change in 1.19.7) by @gaukas in #172
  • feat: Convert raw bytes or tlsfingerprint record to ClientHelloSpec by @gaukas and @gfw-report in #168

New Contributors

Important Notice

#170 and #171 patched vulnerabilities allowing a strong attacker to detect and break uTLS (and Go's crypto/tls) connections. Please consider updating your go.mod to use the latest version of uTLS.

Full Changelog: v1.2.2...v1.3.0

Don't miss a new utls release

NewReleases is sending notifications on new releases.