Skip to content

v.15

Latest
Latest

Choose a tag to compare

View all tags
@eugenezimin eugenezimin released this 21 Oct 18:12
v.15
217651b

Pace Maker 15: safer by design

This release focuses on security and privacy. Credentials move to the Keychain, the app runs in the macOS sandbox, and every request now goes exactly where you point it.

Security & privacy

  • Credentials in the Keychain: values of credential headers (Authorization, Cookie, API keys and similar) are stored in your login keychain instead of the settings file. Values saved by earlier versions move there automatically on first launch
  • Redirects aren't followed: a 3xx response is shown as the response itself, so every request measures the URL you entered and no load (or credentials) reaches another host
  • Bounded memory for large responses: response bodies are streamed. The start is kept for display and the rest is only counted, so a huge response can't exhaust memory
  • Only web addresses: targets must be http:// or https://; other schemes such as file: are refused
  • Safer server text: text from a server's response can no longer turn into clickable links in the explanations under each tab
  • Sandboxed: the app runs in the macOS App Sandbox with access only to outgoing network connections. Your settings carry over from earlier versions

What's new

  • Plain http:// targets work everywhere: before, macOS blocked plain-HTTP servers other than localhost and IP addresses
  • Help menu: Pace Maker Support and Privacy Policy, instead of an empty help item
  • Sensible limits: Max RPS, Max Connections (up to 1,024), Queue Depth and the stop conditions have upper limits, so a typo can't overwhelm your Mac
  • Starts at your own server: new installs point at http://localhost:8080 instead of a public website
  • A note on first launch: a one-time reminder to test only servers you own or have permission to test
  • Closing the window pauses the test: reopen it from the Dock to see it paused and ready to resume
  • One window: Pace Maker is now a single-window app, so two windows can't overwrite each other's settings

Changed

  • The Transport setting is gone: Pace Maker tests HTTP endpoints
  • The Googlebot user-agent preset has been removed

Fixed

  • The 3xx status explanation no longer claims that redirects are followed

Requirements

macOS 14 or later on Apple Silicon. Downloads are signed with a Developer ID and notarized by Apple.

Downloads

File SHA-256
PaceMaker-15.dmg a08c77c092ba0a04eb5e93a7008dff002478c93330948654734c247b043243ea
PaceMaker-15.zip 6bf45e18f5c16841c957dabe1325bb1080b6af977eb505f40415604ac457e77a
Assets 5
Loading