Aether core updated to v1.4.0
- Security fix — MASQUE connections now verify the Cloudflare edge certificate against pinned SPKI hashes instead of skipping verification entirely (both the HTTP/3 and HTTP/2 transports). Previously, anyone able to intercept the connection could present a fake certificate and the client would accept it silently.
- WireGuard and WARP-in-WARP (gool) no longer lie about being connected — both now run a continuous health check and reconnect automatically if no real data has come back from the peer for a while, instead of sitting on a SOCKS5 proxy that leads nowhere.
- gool reconnects automatically like the other two modes — previously, if the outer tunnel dropped, the whole process just exited.
- Fixed a memory/task leak across WireGuard, MASQUE HTTP/2, and MASQUE HTTP/3: every reconnect used to leave old background tasks running, so long sessions with frequent drops would slowly pile up idle tasks and memory.
- Aether now reads the machine's CPU count and RAM at startup and scales scan concurrency, socket buffers, and internal queues accordingly — friendlier to routers and small boards.
No GUI changes were needed for this update — confirmed by diffing upstream source that no new interactive prompts were added and scan-mode timeout budgets are unchanged.
Downloads
| Platform | File |
|---|---|
| Windows | Aether-GUI_0.6.0_x64-setup.exe (recommended) or .msi |
| macOS — Apple Silicon | Aether-GUI_0.6.0_aarch64.dmg |
| macOS — Intel | Aether-GUI_0.6.0_x64.dmg |
| Linux — Debian/Ubuntu | Aether-GUI_0.6.0_amd64.deb |
| Linux — Fedora/openSUSE | Aether-GUI-0.6.0-1.x86_64.rpm |
| Linux — portable | Aether-GUI_0.6.0_amd64.AppImage |
macOS note: the apps are unsigned, so the first launch needs right-click → Open (or
xattr -cr /Applications/Aether-GUI.app).
The bundled aether core v1.4.0 is fetched from the official Aether release and SHA256-verified at build time.
🤖 Generated with Claude Code