RELEASE_NOTES_v0.16.7.md

1# 0.16.7

3TLS connections now negotiate TLS 1.3 when the server supports it, while

4remaining compatible with TLS 1.2-only servers. This requires sigil-crypto

50.16.6 or later in the 0.16 series, with Mbed TLS 3.6.7 and PSA enabled.

7New tls-connect/details and tls-upgrade/details procedures return per-attempt

8handshake errors, state, verification flags and negotiated protocol/cipher.

9The existing connection and /status APIs retain their argument and return

10shapes. Bounded handshakes keep their existing total deadlines.

12Validation: 22 TLS tests and 100 crypto tests passed. Native Linux and Android

13fixtures each passed forty encrypted roundtrips per TLS version, certificate

14rejection, and reconnect after rejection. Production certificate verification

15was also exercised with TLS 1.3 clients on both systems. These checks do not

16establish a terminal-latency or CPU improvement.