git.iko.soy/skrepka
on master help sign in
history ofPROTOCOL.md
all commits
850d68dsecurity audit fixes: 35 findings across core, shell, server, specLancelot ee54351Security audit 13th pass: fix 23 findings across crypto, server, clientLancelot 3258116Security: add AAD to AEAD (v0x02), fix livelock, bound dedup, cap gossip amplificationiko 11c24d8Security audit fixes: Q16 cursor poisoning, Q17 ack ordering, Q18 persistent seen_ids, Q25 malformed JSON, Q35 revokeOthers challenges, Q37 sig inside atomic, Q38 audit log, Q49 low-order X25519 check, spec gaps Q39-Q44, §10 risk table updatesLancelot f34323cFifth-pass audit: fix send_text contact-cap ordering, spec version-byte omissions, zstd level, DeleteContact UI, comment mismatchiko 92e93f0Fourth-pass audit: zeroize decrypt intermediates, fix dead poll loop, clamp ts lower bound, enforce MAX_CONTACTS in send_text, profile-before-text ordering, ack_ids post-filter count check, fix §4 Blocking speciko b8d30b6Third-pass audit: fix cursor-loss, block-check, zeroization, spec driftiko f04d81bAudit: implement all 18 findings from protocol/codebase reviewiko c28cf14Swift: disable HTTP redirect following; server/protocol: document timing side-channel and key rotation future extensioniko b0ffcd8Add length padding to encrypted blobsiko 5477c47Comprehensive bug fix pass: crypto, state machine, FFI, server, Apple shelliko 362399cFix round-2 audit findings: blocked acks, ts clamping, key validation, docsiko affb421Fix all 16 audit findings: outbox stall, deploy auth, panics, security, docsiko 91b7b58Add iOS client: Rust/Crux core + SwiftUI shell with crypto, messaging, auth, profiles, QR scanning2026.06.25.0917iko ec51d84Fix auth session relay attack by binding challenge signature to target server hostname2026.06.23.0618iko 65c98c8Update PROTOCOL.md to reflect actual implementation: fix @p format, clarify message IDs, correct error codes, expand SSRF deny-listiko 1ef8c13Update docs: PROTOCOL.md rewrite for wire format accuracy, CLAUDE.md persistence notes, README client runbookiko a70c802Improve server.knot security, reliability, and protocol: fix IP binding bypass, add federation verify retry, pre-filter gossip capacity, tighten hung slot cleanup, add poll heartbeat field, update protocol docsiko 9d1c525Hard-code long poll timeout to 20 secondsiko 57cf03bImprove client type safety and simplify state management: embed page state into Page DU, add delivery status tracking, inline identity generation, make ServerUrl non-optionaliko a46a268Add Skrepka protocol specification (v0.1 draft)iko