Skip to content

v1.3.0

Choose a tag to compare

View all tags
@ibnbd ibnbd released this 21 Mar 02:48
· 18 commits to main since this release
v1.3.0
81a11d8
This commit was signed with the committer’s verified signature.
ibnbd Akram H. Sharkar
GPG key ID: A5E95462A3931709
Verified
Learn about vigilant mode.

What's New

Remote Relay Transport

Connect to a self-hosted StealthRelay server from anywhere — not just local Wi-Fi/Bluetooth.

  • WebSocket transport with Ed25519 host authentication
  • Invitation-based joining with signed URLs and proof-of-work
  • TLS certificate pinning and session token enforcement
  • Automatic reconnection with peer auto-acceptance

Security Hardening (5 Audit Laps, 50+ Fixes)

  • HMAC integrity uses shared secret with length-prefixed inputs
  • Constant-time HMAC verification via CryptoKit
  • Peer IDs use stable UUIDs, not attacker-controlled display names
  • Transport-authenticated identity for games, polls, reactions
  • Global brute-force rate limiting
  • Notification privacy — no message content in OS notifications

68 Unit Tests

Full test coverage for RelayEnvelope, MeshTopology, PoolMessage, dedup cache, and RemotePoolState.

UI Improvements

  • Max members picker, delete saved servers, proper disconnect cleanup
  • Share sheet auto-dismisses for join approval
Assets 2
Loading