SPX Release Notes
-----------------


12/28/92      SPX v2.4 Release

    features:

	-  removed certificate expiration
	-  cleaned up documentation


3/20/92	      SPX v2.3 Beta Release

    features:

	-  SPX support for "dual-headed" KDC
	-  modifications to Kerberos V4 for common network login
	-  support unencrypted key generation, for RSA_ENCPWD
	-  cdb_edit is able to replace certificates from command-line
	-  support DC attribute type in X.500 names
	-  Telnet with SPX and RSA_ENCPWD mechanisms

    bug fixes:

        -  bug fixes


12/7/91	      SPX v2.3 Alpha Release

    features:

	-  support for application-level services via /etc/services.spx
	   file
	-  improved source code portability (tested on Sun 3 and Sun 4)
	-  allow more general cdc configuration table with addresses
	-  modified f-tool application to work with internet addresses

    bug fixes:

 	-  bug fix to support embedded blanks in X.500 names when
	   locating CDC servers
	-  cdb_setup doesn't continue if search path is incorrect
	-  other bug fixes of many varieties (i.e., better error
	   messages, etc.)


8/7/91	      SPX v2.2 Beta Release

    features:

	-  added status message during authentication to indicate
	   whether delegation is taking place
	-  improved source code portability
	-  new man pages

    bug fixes:

	-  bug fix to support SPX authenticated rsh
	-  bug fix when initializing the CDC database
	-  better support for privileged use of SPX
        -  other bug fixes of many varieties (i.e., better error
	   messages, etc.)


5/29/91	      SPX v2.1 Beta Release

    features:

	-  support for SPX authenticated rlogin, rcp
	-  simplified cdb_setup utility so it doesn't require a zillion
	   passwords
	-  supports global scaling via cross certificates
	-  extended privileged account access so SPX can be used
	   by system administrators
	-  added well-known ports for applications
	-  updated GSS API based on ongoing negotiations with Athena
	   (provide flogin and fcp as examples of appls using GSS API)
	-  support for refreshing stale verifier credentials (without
	   requiring password)

    bug fixes:

	-  changed certificate signature algorithm to match RSADSI
	-  sometimes delegated credentials when it wasn't supposed
	   depending on the cached state
	-  fixed bug in interdomain authentication using cross certificates
	-  allow CDC requests to be sent across the Internet
	-  check if certificate expired
	-  fix internet host to X.500 domain mapping feature
	-  other bug fixes of many varieties (i.e., check error conditions,
	   better error messages, etc.)


2/26/91		SPX v2.0 Beta Release

    features:

	-  support for SPX authenticated rlogin
	-  context caching to improve performance for repeated security
	   initiations between two peers

    future enhancements:

	-  replay cache prevention
	-  Trusted Authority list expiration support
	-  password guessing protection
	-  automatic user enrollment