Skip to content

v1.1.0 - Static CT Verification Hardening

Latest

Choose a tag to compare

@ryolution ryolution released this 14 Jul 01:17

Highlights

  • Added trusted Static CT checkpoint verification with signed-note parsing and RFC6962 tree-head signature validation.
  • Hardened Static CT monitoring with safer trusted/untrusted source construction, Merkle helpers, and stricter diagnostic labeling.
  • Improved operational durability with bounded dead-letter state, safer Windows state replacement, and packaged example state.
  • Added webhook HMAC signing support.
  • Strengthened DNS enrichment with validated concurrency, improved response classification, and packaged takeover fingerprints.
  • Improved homoglyph detection using Unicode security skeletons.
  • Moved runtime datasets into the packaged core crate so release artifacts verify correctly.
  • Updated examples, README, usage docs, CI toolchain setup, dependency audit policy, and release metadata.

Verification

  • cargo check --workspace
  • cargo fmt --all -- --check
  • cargo package --workspace --allow-dirty
  • cargo test --workspace
  • cargo clippy --workspace --all-targets -- -D warnings
  • cargo audit
  • cargo deny check advisories licenses bans sources