Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [egit-dev] [jgit-dev] [Announce] Release 3.5.2.201411120430-r

Your message - don't use ssl - can be read as either "don't use ssl, use something better" or "don't use encryption". You probably want to emphasise the former interpretation rather than the latter, which is what this phraseology reads like. 

This is orthogonal to the fact that using ssl is broken. 

Sent from my iPhat 6

On 14 Nov 2014, at 14:41, Daniel Megert <daniel_megert@xxxxxxxxxx> wrote:

SSL is broken and browsers will completely disable it in their next updated. DON'T USE is the right message here.

Dani



From:        Alex Blewitt <alex.blewitt@xxxxxxxxx>
To:        Matthias Sohn <matthias.sohn@xxxxxxxxx>
Cc:        EGit developer discussion <egit-dev@xxxxxxxxxxx>, JGit Developers list <jgit-dev@xxxxxxxxxxx>
Date:        14.11.2014 15:37
Subject:        Re: [egit-dev] [jgit-dev] [Announce] Release 3.5.2.201411120430-r
Sent by:        egit-dev-bounces@xxxxxxxxxxx




I think it would be better to say "upgrade ssl to use tls" rather than "don't use ssl" :-)

Sent from my iPhat 6


On 14 Nov 2014, at 14:19, Matthias Sohn <
matthias.sohn@xxxxxxxxx> wrote:

I tagged the maintenance release 3.5.2.201411120430-r

It's adding the following fixes on top of 3.5.1:

JGit:
3e131a3 - 2014-11-07, Dani Megert : Don't use SSL anymore to avoid POODLE attack (Bug: 450170)

EGit:
677fea6 - 2014-11-07, Robin Stocker : Fix  IAE from setStyleRanges in SpellcheckableMessageArea (Bug: 446081)

Find the new release here
http://eclipse.org/jgit/download/
http://eclipse.org/egit/download/

The JGit Maven artifacts are also available on Maven central.

This release will also be available in the Eclipse Marketplace soon
http://marketplace.eclipse.org/content/egit-git-team-provider#.UNOXSYnjnKw

We plan to release 3.6 in December.

--
Matthias
_______________________________________________
jgit-dev mailing list

jgit-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit

https://dev.eclipse.org/mailman/listinfo/jgit-dev_______________________________________________
egit-dev mailing list
egit-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/egit-dev
_______________________________________________
egit-dev mailing list
egit-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/egit-dev

Back to the top