1## 0.6.1 / 2021-06-30
2
3* [BUGFIX] Allow RequireAnyClientCert as client_auth_type. #58
4
5## 0.6.0 / 2021-06-30
6
7* [CHANGE] Move from github.com/go-kit/kit/log to github.com/go-kit/log #55
8
9## 0.5.1 / 2021-01-15
10
11This release includes a bugfix for a side-channel security issue that would
12allow an attacker to verify if a user is defined in the configuration by timing
13request. #39
14
15* [ENHANCEMENT] Cache basic authentication results to significantly improve
16  performance. #32
17* [BUGFIX] Prevent user enumeration by timing requests. #39
18
19## 0.5.0 / 2021-01-13
20
21* [CHANGE] rename `https` package to `web`. #29
22* [CHANGE] `web`: Rename Listen() to ListenAndServe(). #28
23
24## 0.4.0 / 2020-12-26
25
26This release now correctly resolves relative paths with regards to the
27configuration file, instead of the current working directory.
28
29* [FEATURE] `https`: Add a Validate() function. #22
30* [ENHANCEMENT] `https`: Mark kingpin flag as experimental. #20
31* [BUGFIX] `https`: Make certificate paths relative to configuration file. #21
32
33## 0.3.0 / 2020-12-25
34
35* [FEATURE] `https`: Add Serve to use an existing listener. #16
36* [BUGFIX] Return 401 Unauthorized when a bad password is used. Previously we
37  returned 403 Forbidden in that case. #17
38
39## 0.2.0 / 2020-12-16
40
41* [FEATURE] `https/kingpinflags` package for adding kingpin support for TLS. #12
42
43## 0.1.0 / 2020-12-10
44
45Initial release.
46
47* [FEATURE] `https` package for adding TLS to exporters. #8
48