December 18th, 2011
And lighttpd 1.4 is still alive :)
Especially for ssl users this release should be important: by settingssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM"you can mitigate BEAST attacks.
Also check your site with Qualys SSL Labs Server Test
下载:lighttpd 1.4.30