diff options
| author | Jeff Forcier <jeff@bitprophet.org> | 2017-06-06 13:26:15 -0700 |
|---|---|---|
| committer | Jeff Forcier <jeff@bitprophet.org> | 2017-06-06 13:26:15 -0700 |
| commit | 1c88acaac8afd7d0dbf0062bcabff1795a4a729f (patch) | |
| tree | efa16d34f47d0a14b2cea01a0b98b10f7fe1a33e /sites | |
| parent | 5a4405c87ef7f2d4d428efafc1ac57626c71df60 (diff) | |
| parent | 772e405a2172fa90997fea9fdf2d9eb78a2f3fb7 (diff) | |
Merge branch '2.1'
Diffstat (limited to 'sites')
| -rw-r--r-- | sites/www/changelog.rst | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst index 78e1920a..2e09a5c3 100644 --- a/sites/www/changelog.rst +++ b/sites/www/changelog.rst @@ -2,6 +2,10 @@ Changelog ========= +* :bug:`-` (partial application of :issue:`983`) Move ``sha1`` above the + now-arguably-broken ``md5`` in the list of preferred MAC algorithms, as an + incremental security improvement for users whose target systems offer both. + Credit: Pierce Lopez. * :bug:`667` The RC4/arcfour family of ciphers has been broken since version 2.0; but since the algorithm is now known to be completely insecure, we are opting to remove support outright instead of fixing it. Thanks to Alex Gaynor |