{"push_id":734587225,"size":13,"distinct_size":0,"ref":"refs/heads/alertsandcerts","head":"6404439ad57ba119c80da4007e8267654cb305c0","before":"84a5d3f72f65cdc6fb9d25b10d20d37e30e5da0c","commits":[{"sha":"3b881cf6b73755d12551224dfef018d00fd816e4","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"fix broken cross-reference link","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/3b881cf6b73755d12551224dfef018d00fd816e4"},{"sha":"e3fe8996529d5c7f7b2a6c0aedfef1ecf071c25b","author":{"email":"24d4668a57890d88a8ba496f5d54cc5cd52315cf@rtfm.com","name":"ekr"},"message":"Merge pull request #206 from davegarrett/patch-1\n\nfix broken cross-reference link","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/e3fe8996529d5c7f7b2a6c0aedfef1ecf071c25b"},{"sha":"342d5668f89d553dcd16012d00e1d156f7e912ce","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"add MTI extensions & \"missing_extension\" alert\n\nMandates usage of signature algorithms and negotiated groups extensions.\nAlso adds a note not to use Truncated HMAC extension (from BCP).","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/342d5668f89d553dcd16012d00e1d156f7e912ce"},{"sha":"631f7326980c41bdf8827fc07c60c5d319f6a56a","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"update alert message list to include all standardized alerts","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/631f7326980c41bdf8827fc07c60c5d319f6a56a"},{"sha":"40e2062d64bc96d259e07280c4f16092184480ca","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"specify expected error alerts for more issues","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/40e2062d64bc96d259e07280c4f16092184480ca"},{"sha":"b050d5165dc640002faf0681fb2288b2708bf26b","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"allow servers to send cert chains without 100% known support\n\nThis shifts the final decision of whether or not a cert chain is acceptable fully to the client. Language based on discussion with Viktor Dukhovni.","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/b050d5165dc640002faf0681fb2288b2708bf26b"},{"sha":"2ebeb6a6d46975c9b0abd191d13f17404910affc","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"typo fix, RFC2119 fixes, & add clarifications","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/2ebeb6a6d46975c9b0abd191d13f17404910affc"},{"sha":"27b051540cd91859d89c632bd019a09e8148fd67","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"deprecate SHA-1 and add fatal errors for MD5 & no SNI\n\nMUST fatal alert on MD5 & SHOULD on no SNI, if applicable.\n\nAlso fix remaining cases of the Negotiated Groups extension being named \"named_groups\" rather than the currently used \"supported_groups\".","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/27b051540cd91859d89c632bd019a09e8148fd67"},{"sha":"f0eaf36adb3379dbecaf902694040a9e60e873c3","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"curve selection recommendations + clarifications/fixes\n\nAdditional fixes:\n* cleanup changelog slightly\n* cite RFC 7507 now that it's already in the references due to updating the alerts list\n* add a missing reference for TLS 1.2 to fix citation of it from a previous change\n* note that obsolete curves are considered weak\n* note renegotiation info & session ticket as obsolete\n* fix incorrect usage of the word \"usage\" (some new; some old) reported by Viktor Dukhovni\n* add other mandatory extensions & allow SHA-1 rejection\n* address comments from Hubert Kairo","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/f0eaf36adb3379dbecaf902694040a9e60e873c3"},{"sha":"4e4777877a5c3ca6cf87bc28b381d81fd08f7783","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"some editorial changes to \"Closure Alerts\"\n\n* Remove old note about change in TLS 1.1\n* Drop a repeated sentence\n* Move ignore data MUST to \"close_notify\" description\n* Move \"user_canceled\" to \"Closure Alerts\" section instead of \"Error Alerts\" as it's not an error\n* Reword \"close_notify\" requirement line to be more clear\n* Fix some RFC 2119 language","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/4e4777877a5c3ca6cf87bc28b381d81fd08f7783"},{"sha":"c19892452adf03399513b3941bc37bc847b2448f","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"move requirement to top of sections & note \"extension_data\"\n\nPut the similar text in the same place near the start of each extension.\nAlso be explicit about \"extension_data\" definitions with new extensions.","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/c19892452adf03399513b3941bc37bc847b2448f"},{"sha":"ccc1f5e0af2aad18f547b642760ae34626e913fa","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"add more explicit fatal alert cases\n\n* Address comments from Hubert Kairo\n* Note that TLS servers MAY reject SSL2 compatible hellos with an error if following the recommendation.\n* Add error to respond with in the event that a TLS 1.3 peer offers <112-bit ciphers.","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/ccc1f5e0af2aad18f547b642760ae34626e913fa"},{"sha":"6404439ad57ba119c80da4007e8267654cb305c0","author":{"email":"10fe7706da4dfd294e1d96dc89571a397439e16e@gmail.com","name":"Dave Garrett"},"message":"fix insufficient_security description in ServerHello\n\n* Previous text was wrong. This alert is defined for cipher suite negotiation failure. Negotiated Groups instructs using another.\n* Also change that latter section's name slightly to avoid having two \"Cipher Suites\" sections.","distinct":false,"url":"https://api.github.com/repos/davegarrett/tls13-spec/commits/6404439ad57ba119c80da4007e8267654cb305c0"}]}