NEWS for 0.13.3

1 files changed, 40 insertions, 0 deletions

diff --git a/NEWS b/NEWS
index c4a3b3a7..8dca0ae5 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,46 @@
 telepathy-gabble 0.13.3 (UNRELEASED)
 ====================================
 
+The “I got 99 poplars” release. This contains all the fixes from
+telepathy-gabble 0.12.4, and more.
+
+Changes:
+
+• 'require-encryption' is now enabled by default. This seems like a
+  reasonable thing to do in 2011. It will obviously cause connection
+  errors if any of the user's configured Jabber servers do not support
+  encryption. It may also cause problems if the user is connecting to
+  servers with untrustworthy SSL certificates.
+
+  When Gabble encounters a certificate it does not trust, it creates a
+  ServerTLSConnection channel, in the hope that it will be handled by an
+  application which can prompt the user. Empathy has a handler for such
+  channels.
+
+  On other platforms where no handler is available, if
+  require-encryption is disabled, Gabble falls back to accepting those
+  certificates (on the basis that encryption was being used
+  opportunistically), but if it is enabled, Gabble falls back to
+  rejecting them.
+
+• Relatedly, Gabble will itself accept certificates for domains listed
+  in 'extra-certificate-identities' if they have no other problems.
+  Previously it would include these identities in a property on the
+  ServerTLSConnection channel, but do nothing with them itself. (Marco
+  Barisione, fd.o#38749)
+
+Fixes:
+
+• If telepathy-yell is installed to /usr/include, the included copy will
+  still be used. (Vincent Penquerc'h, fd.o#37492)
+
+• With GnuTLS 2.12, sending very large amounts of data will no longer
+  cause the connection to stall. (Sjoerd Simons, fd.o#36077)
+
+• File transfer channels should now work on Windows. (Thomas Flüeli,
+  fd.o#31621)
+
+
 telepathy-gabble 0.13.2 (2011-06-24)
 ====================================