| Commit message (Expand) | Author | Age | |
|---|---|---|---|
| * | Do not use strcmp() to compare an http authenticator to its expected value•••This fixes a side-channel attack on the (fortunately unused!) BridgePassword option for bridge authorities. Fix for bug 5543; bugfix on 0.2.0.14-alpha. | Nick Mathewson | 2012-04-01 |