1## 0.6.1 / 2021-06-30 2 3* [BUGFIX] Allow RequireAnyClientCert as client_auth_type. #58 4 5## 0.6.0 / 2021-06-30 6 7* [CHANGE] Move from github.com/go-kit/kit/log to github.com/go-kit/log #55 8 9## 0.5.1 / 2021-01-15 10 11This release includes a bugfix for a side-channel security issue that would 12allow an attacker to verify if a user is defined in the configuration by timing 13request. #39 14 15* [ENHANCEMENT] Cache basic authentication results to significantly improve 16 performance. #32 17* [BUGFIX] Prevent user enumeration by timing requests. #39 18 19## 0.5.0 / 2021-01-13 20 21* [CHANGE] rename `https` package to `web`. #29 22* [CHANGE] `web`: Rename Listen() to ListenAndServe(). #28 23 24## 0.4.0 / 2020-12-26 25 26This release now correctly resolves relative paths with regards to the 27configuration file, instead of the current working directory. 28 29* [FEATURE] `https`: Add a Validate() function. #22 30* [ENHANCEMENT] `https`: Mark kingpin flag as experimental. #20 31* [BUGFIX] `https`: Make certificate paths relative to configuration file. #21 32 33## 0.3.0 / 2020-12-25 34 35* [FEATURE] `https`: Add Serve to use an existing listener. #16 36* [BUGFIX] Return 401 Unauthorized when a bad password is used. Previously we 37 returned 403 Forbidden in that case. #17 38 39## 0.2.0 / 2020-12-16 40 41* [FEATURE] `https/kingpinflags` package for adding kingpin support for TLS. #12 42 43## 0.1.0 / 2020-12-10 44 45Initial release. 46 47* [FEATURE] `https` package for adding TLS to exporters. #8 48