2.1 and beyond

• New service registration mechanism
• SPNEGO support
• tokencache API for filesystem or oracle backend (?)

2.0.2 - Current Release

• External authenticators in the CGI
• Multifactor authentication in the CGI
• New Cosign v2 protocol
• New version of libcgi, no more lex/yacc!
• IP changes trigger re-auth events

1.9 - December 2005

• dbhash support for filter and daemons
• removal of k4 support for filters
• bug fixes

1.9 - October 2005

• kx.509 & kct integration
• cgi Re-Auth
• greater configuration flexibilty in filters
• friend enhancements - separate release

1.8.5 - May 2005

• better integration with apache filters and native authZ
• minor bug fixes/feature enhancements

1.8 - March 2005

• runtime config for cgi and daemon
• major code review and some restructure
• improvements to replication

1.7 - November 2004

• unified rate logging paradigm
• new cookies issued after 24 hours to address long lived browsers
• authN optional mode, cedes authN decisions to application

1.6 - August 2004

• n-tier cosign proxy authentication
• cosign protection for http/https
• arbitrary site entry policy

1.5 - March 2004

• Friend
• Replication
• Apache 2.0 support

1.1 - September 2003

• BasicAuth capabilities in the cgi
• Cookie and ticket clean up program

1.0 - June 2003

• docs
• improved http compatibility

0.9.0 - April 2003

• kerberos ticket passing
• portability enhancements
• various bug fixes

0.8.0 - mid November 2002

• autoconf
• improved cgi & html
• first release of isapi authentication filter

0.7.0 - early October 2002

• basic functionality
• kerberos/gssapi authentication
• Apache 1.3.x authentication filter
• ssl encrypted connections with cosignd
• universal logout

cosign 0.7.0 - early October 2002

• first pass at service menu
  ( finished 10/05/2002 )
• create weblogin.umich.edu
  ( finished 10/12/2002 )

cosign 0.8.0 - October 2002

• isapi filter to windows clients for testing
  ( distributed: 10/18/2002 )
• move service to weblogin.umich.edu
  ( finished 10/14/2002 )
• enable 24x7 monitoring via nefu
  ( finished 10/14/2002 )

cosign 0.9.0

• refined service menu available for testing and comment by campus community
  ( released 12/11/2002 )
• rollout for services that do not require pts authorization or kerberos tickets ( e.g. cow, www.umce, development, mprint, etc. )
  ( finished 1/22/2003 )
• investigate pts authorization
  ( solution prepared 11/12/2002 )

cosign 1.0.0 - Current Release

• full campus rollout ( directory, mail, etc. )
  
• deployed replicated servers
• full user documentation available.
• moved kpasswd.cgi and hint functionality to weblogin.umich.edu
  

post 1.0

• complete/merge-in kx.509 changes
• maintenance, bug fixes, feature enhancements.