www/adium.im 789:8adb5d78d104: Complete 1.5.7's changelog.

[commits at adium.im]

details:	http://hg.adium.im/www/adium.im/rev/8adb5d78d104
revision:	789:8adb5d78d104
branch:		adiumx.com
author:		Robert Vehse <robertvehse at fastmail.fm>
date:		Sat Jul 06 21:45:48 2013 +0200

Complete 1.5.7's changelog.

diffs (15 lines):

diff -r 7a95793e8810 -r 8adb5d78d104 changelogs/1.5.7.html
--- a/changelogs/1.5.7.html	Fri Jul 05 16:45:51 2013 +0200
+++ b/changelogs/1.5.7.html	Sat Jul 06 21:45:48 2013 +0200
@@ -55,6 +55,11 @@
 				<li>Fixed a bug that could cause SSL connections to be closed prematurely. (<a class="closed ticket" href="https://trac.adium.im/ticket/15405" title="defect: Cannot log into Adium (closed: fixed)">#15405</a>, <a class="closed ticket" href="https://trac.adium.im/ticket/15411" title="defect: Google Talk Jabber Connections Regularly Disconnect (closed: fixed)">#15411</a>, <a class="closed ticket" href="https://trac.adium.im/ticket/15741" title="defect: Adium being disconnected from Facebook several times a minute (closed: fixed)">#15741</a>, <a class="closed ticket" href="https://trac.adium.im/ticket/16356" title="defect: SSL SocketRead should retry on noErr (closed: fixed)">#16356</a>)
 				</li>
 				<li>Fixed a number of weaknesses in the SSL code.
+				<ul>
+					<li>Removed all anonymous ciphers from the list Adium tries, these are insecure and would crash Adium.</li>
+					<li>Removed SSL_RSA_WITH_NULL_MD5 from the list of ciphers, as it doesn't use encryption.</li>
+					</li>Removed the caching of untrusted certificates, as the implementation would make it easy to replace it with a different certificate when reconnecting.</li>
+				</ul>
 				</li>
 			</ul>
 		</div>