-
-
Notifications
You must be signed in to change notification settings - Fork 3.1k
Closed
Labels
P0Critical: Tackled by core team ASAPCritical: Tackled by core team ASAPbackwards incompatible: protocolepickind/enhancementA net-new feature or improvement to an existing featureA net-new feature or improvement to an existing featurestatus/readyReady to be workedReady to be workedtopic/securityTopic securityTopic securitytopic/trackingTopic trackingTopic tracking
Milestone
Description
Now that IPFS has support for TLS and Noise, it's time to complete the process of deprecating and removing support for Secio. This issue is for tracking the rollout.
Please upgrade IPFS ASAP to stay connected! If you are having issues upgrading please let us know here.
Planned releases
Target version of Secio removal: 0.7
History of security support changes
Each update contains the security protocol listed by default priority.
Go IPFS
<0.4.21: Secio
0.4.21: Secio > TLS1.3 (May 31, 2019)
0.5.0: TLS1.3 > Secio (April 28, 2020)
0.6.0: TLS1.3 > Secio > Noise (June 20, 2020)
JS IPFS
<0.47.0: Secio
0.47.0: Secio > Noise (June 24, 2020)
BREAKING CHANGES
Removal of Secio will result in the following:
- Go IPFS nodes older than 0.4.21 will not be able to communicate with Go IPFS nodes >= 0.7.
- Go IPFS nodes older than 0.5.0 with TLS support will require an additional round trip when creating a connection with GO IPFS nodes >= 0.7 (this is due to failing to negotiate Secio and falling back to TLS1.3)
- JS IPFS nodes older than 0.47 will not be able to communicate with GO IPFS nodes >= 0.7.
Testing
- Prior to removing support for Secio we will do thorough testing of the DHT to ensure we are maintaining performance added in 0.5.
References
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
P0Critical: Tackled by core team ASAPCritical: Tackled by core team ASAPbackwards incompatible: protocolepickind/enhancementA net-new feature or improvement to an existing featureA net-new feature or improvement to an existing featurestatus/readyReady to be workedReady to be workedtopic/securityTopic securityTopic securitytopic/trackingTopic trackingTopic tracking