- Remember the connection that worked and try it alone first next start
- Prefer plain HTTP on the home network (each TLS handshake costs seconds on a
600 MHz phone); new setting "Encrypt at home too" to keep HTTPS
- Try secure addresses one at a time instead of in parallel, so they don't
all time out together
- TLS 1.2 with session resumption: reconnects skip the full handshake
- Cache certificate chains already verified; changing the trusted roots
clears that cache and all TLS sessions
- README: updated connection order; test: session resumption check and
HandshakeProfile
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Fix NoSuchMethodError on Android 2.x: Dalvik before 4.0 can't link Object
methods (toString/equals/...) called through an interface. Patch the bundled
Bouncy Castle (tools/patch_bc_dalvik.py) and our own CertVerifier, and make
build.sh fail if tools/scan_dalvik.py finds any such call
- Treat a manually entered private address (10.x, 172.16-31.x, 192.168.x,
.local) as home, so LAN servers that allow access without sign-in work
- Send Plex client headers on media requests (files and transcodes)
- Explain a 503 on a file as the server being unable to open it (drive or
folder not available)
- Connection log: home/away, token presence, Plex's file check and a direct
file request in the streaming test
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
