Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
KevinGaudin committed May 12, 2013
1 parent a0fe00b commit 8b1f3ef
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,8 +43,10 @@ For a complete changelog, please see the [ChangeLog page](http://github.com/ACRA

ACRA v4.5 - enabling the future
===============================
ACRA v4.5.0 is now available as a second Release Candidate:
https://oss.sonatype.org/content/groups/public/ch/acra/acra/4.5.0RC3/acra-4.5.0RC3.zip

**ACRA 4.4.0 is now the official stable version.**

https://oss.sonatype.org/content/groups/public/ch/acra/acra/4.5.0/acra-4.5.0.zip
(also available in Maven Central repository)

The summarized changelog is here: https://github.com/ACRA/acra/wiki/ChangeLog
Expand All @@ -69,8 +71,6 @@ New ideas about the project are always welcome, you can open feature requests in
ACRA v4.4 - enforcing security
==============================

**ACRA 4.4.0 is now the official stable version.**

ACRA has been named in [this report](http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf) as a potential cause of SSL vulnerability for all android apps using it.

The truth is that, in order to let devs use alternative backends over an SSL connection with self-signed certificates, I chose to disable certificate validation in earlier versions of the lib. But this was done only on the scope of ACRA reports senders. Using ACRA did not imply that your app became unsafe for all its SSL communications.
Expand Down

0 comments on commit 8b1f3ef

Please sign in to comment.