0.3.1

Bugfix

• Fix: Allow to issue plaintext http requests for local auth servers

Improvements

• Deps and refactor

What's Changed

• fix: allow http for http client by @junkurihara in #53
• 0.3.1 by @junkurihara in #54
• Merge pull request #54 from junkurihara/develop by @junkurihara in #55

Full Changelog: 0.3.0...0.3.1

0.3.0

Improvement

• Supported blind RSA signature to issue anonymous tokens
• Add logging service
• Refactor: lots of minor improvements

What's Changed

• 0.2.0 by @junkurihara in #30
• Feat/logging by @junkurihara in #35
• chore(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #37
• feat: Anonymous token validation based on blind RSA signature by @junkurihara in #38
• deps: otel and tracing-opentelemetry by @junkurihara in #46
• 0.3.0 by @junkurihara in #48

Full Changelog: 0.2.0...0.3.0

0.2.0

This release contains a lot of brand-new features related to HTTP message signatures (RFC9421) for Mutualized Oblivious DNS over HTTPS.

• Support DH Key-exchange based HMAC signature and public key based signature for HTTP message signatures
  • DHKex (X25519 and ECDH-P256) based HMAC-SHA256 signature
  • Public key based signature (EdDSA and ECDSA-P256)
• Wire protocol and wire format for exposed public keys.
• New features called "httpsig transition margin": This allows us to solve problems related to key updates. In particular, even if new public keys are published for DHKex at a sender and the latest keys are not yet fetched by a receiver (i.e., the receiver still have stale public keys of the sender), the receiver can still verify the request dispatched from the sender securely. This is really demanded in the async key exchange situations like our httpsig public key rotation scenario.
• Support online registry hosting a list of HTTP message signatures enabled domains, much like the dnscrypt/dnscrypt-resolvers. Unlike the list fetched by clients, the registry for http message signatures enabled domains is referred to by relays and target resolvers.

What's Changed

• docs: docker documatations by @junkurihara in #12
• feat: implement transitional signing and verifying by @junkurihara in #25
• support httpsig pk registry by @junkurihara in #27
• feat: Add http message signature (RFC9421) based request authentication for allowed sources by @junkurihara in #24

Full Changelog: 0.1.0...0.2.0

0.1.0

Initial release!

What's Changed

• feat: hyper 1.0 by @junkurihara in #3
• feat: odoh target by @junkurihara in #4
• Feat ip domain filtering by @junkurihara in #5
• Feat: trace and metrics by @junkurihara in #6
• Add evil trace feature for development by @junkurihara in #7
• 0.0.0 by @junkurihara in #8
• feat: support hyper-rustls along with hyper v1 by @junkurihara in #9
• docs: readme by @junkurihara in #10

Full Changelog: https://github.com/junkurihara/modoh-server/commits/0.1.0