Skip to content

HNS DANE Browser 0.5.5

Choose a tag to compare

@denuoweb denuoweb released this 29 Jul 14:20

HNS DANE Browser 0.5.5 is the coordinated Android and iOS update of the strict, cross-platform Handshake browser.

Highlights

  • Preserves authenticated ICANN negative evidence by expanding compressed NS and SOA names before retaining record data.
  • Evaluates namespace-plan freshness after DNS/TLSA resolution so newly gathered evidence is not rejected against an older clock sample.
  • Hardens the iOS shell’s factual readiness and bounded navigation recovery, keeps semantic Proof Details capture stable, and revalidates a cached main frame through the Rust proxy before presenting new trust status.
  • Aligns the release identities at shared Rust 0.5.5, Android 0.5.5 (code 46), and iOS 0.5.5 (build 57).

Downloads

  • hns-dane-browser-v0.5.5-release.apk — signed, 16 KiB-aligned Android installer; 51,326,667 bytes; SHA-256 b36a4346ffcba14c081500ef3dc7c5012cabd30f42cdaa80a354eefb5da210ba.
  • hns-dane-browser-v0.5.5-ios-app-store.ipa — App Store-signed iPhone distribution package; 47,930,601 bytes; SHA-256 efea01f912035d0e2cde880a59cbe9e5b2e3f546e781fa5d9606942629225345.

The IPA is signed for App Store distribution and is not a general-purpose sideload package. Google Play received the signed AAB separately; it is not published as a GitHub download.

Verification and deployment

  • Release tag v0.5.5 peels to shipping source d926561091634cd69fc9b7e79a4b76003fa4ee47. The Android code 46 artifacts were built at version-bump source d24f85158854abb8be4a7bb9e914aebe5e7e4679; the later source changes are Apple-specific.
  • Full cross-platform CI run 30448341156 passed repository policy, Rust/supply-chain, Android, Apple, and Required CI. Exact-head Apple CI run 30454904736 passed after the final iOS corrections.
  • Live Release screenshot run 30454926117 produced four fixture-free, exact-source iPhone images with DANE-verified HNS, same-navigation Proof Details, and authenticated ICANN WebPKI provenance.
  • The signed Android APK/AAB passed signature, 16 KiB alignment, native hardening, symbol, path-sanitization, R8 mapping, and notices gates. Android Publisher edit 17438779769069438085 completed code 46 directly in Google Play production, and generatedApks/46 returned HTTP 200.
  • Protected iOS upload run 30456522039 passed the complete Apple gate, signed build 57, uploaded it to App Store Connect, and retained the exact IPA published here. App Store Connect reports the build VALID and the direct App Review submission WAITING_FOR_REVIEW, with manual release selected. No TestFlight distribution was created.

Signed physical-device matrices remain separate Android/iPhone qualification work; they do not change the completed package, store-upload, or direct-review evidence above.

Full changelog: v0.5.4...v0.5.5