<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hello again everyone,<div class=""><br class=""></div><div class="">I bring you a prerelease of the Twisted 16.4.1 security fix release, thus deemed 16.4.1pre1. This release contains:</div><div class=""><br class=""></div><div class="">- A mitigation for SWEET32 (<a href="https://www.openssl.org/blog/blog/2016/08/24/sweet32/" class="">https://www.openssl.org/blog/blog/2016/08/24/sweet32/</a>).</div><div class="">- The inclusion of ChaCha20 to our TLS cipher suite, providing your underlying OpenSSL supports it.</div><div class=""><br class=""></div><div class="">Please note that the SWEET32 mitigation will break TLS from IE on Windows XP. This shouldn't be an issue for you (hopefully), but if you need to support those poor XP using souls, you can add 3DES back to your CertificateOptions yourself.</div><div class=""><br class=""></div><div class="">As usual, it's available for download -- go here (<a href="https://twistedmatrix.com/Releases/pre/16.4.1pre1/" class="">https://twistedmatrix.com/Releases/pre/16.4.1pre1/</a>) to get the prerelease tarballs and the full NEWS file. If you want to install it right away, run:<br class=""><br class=""> pip install <a href="https://twistedmatrix.com/Releases/pre/16.4.1pre1/Twisted-16.4.1rc1.tar.bz2" class="">https://twistedmatrix.com/Releases/pre/16.4.1pre1/Twisted-16.4.1rc1.tar.bz2</a><br class=""><br class="">Please let me know if you have any issues, as well as if you don't! If everything works well, that's a good thing for me to know :)<br class=""><br class="">Have fun, and stay secure!</div><div class=""><br class=""></div><div class="">Twisted Regards,<br class="">Amber Brown (HawkOwl)</div></body></html>