CHANGELOG update

diff --git a/CHANGELOG b/CHANGELOG
index bff24ee8d9e7d6e73f504166f8295466670db4c0..7bdab4d5a037ca07842feda47d22bc45da71e457 100755 (executable)
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,6 +1,66 @@
 Firma CHANGELOG
 ---------------
 
+13/10/2006 - 0.3-cvs (rev 1.143) - rhatto
+
+Mais coisa hoje :)
+
+  - new list config parameters:
+
+    - DELIVERY_RANDOMIZATION: if non-zero, set a random
+      delay between 0 and N seconds between each messsage
+      delivery; if you run firma with a TLS-enabled MTA and
+      mostly of the list messages are sent to others TLS-enabled
+      MTAs, then this option will make harder to a sniffer detect
+      the traffic of you mailing list, specially if your MTA
+      already sends a lot of messages or if you're going
+      to have a lot of encrypted mailing lists, all randomizing
+      its delivery.
+
+    - REPLAY_PROTECTION: when set to "yes", stores sha1sums
+      of the last REPLAY_COUNT received messages; then,
+      if some message with an already stored sha1sum, then
+      its bounced back to the sender and considered as an attempt
+      of replay attack.
+
+    - REPLAY_COUNT: number of messages to store sha1sums;
+      defaults to 10 and only used when REPLAY_PROTECTION
+      is set to "yes".
+
+    - REPLAY_FILE: file to store sha1sums of messages;
+      only used when REPLAY_PROTECTION is set to "yes";
+      defaults to /var/log/firma/replay.db.
+
+  - in function NewList:
+
+    - changed variable DESCRIPTION to KEY_DESCRIPTION.
+    - fixed key lenght size.
+    - now key information (size and description) is written
+      in the list config file; this can help in the future
+      as key regeneration support is added.
+
+  - fix in config parameters evaluation
+
+  - new list config variable LIST_REQUEST_ADDRESS that defaults
+    to listname-request@domain.
+
+  - in function MimeWrapMessage: changed From: and Reply-To: to
+    $LIST_REQUEST_ADDRESS.
+
+  - new functions:
+
+    - SetDeliveryRandomization
+    - DeliveryRandomization
+    - ReplayProtectionFlush
+    - ReplayProtectionCheck
+
+  - in function ReEncryptAndSendListMessage: added a call to
+    DeliveryRandomization both when hidden recipient is enabled
+    or disabled.
+
+  - in function ProcessMessage: added call to ReplayProtectionCheck
+    and else clause.
+
 12/10/2006 - 0.3-cvs (rev 1.138) - rhatto
 
   - new config file evaluation scheme: now config files