- Small speed boost. - Fix the only known deadlock-cause logged in the last year; happened (rarely) on multiple parallel queries on a single connection. - Fix the only known race condition logged in the last year; happened on some queries that store >32KB data per query. - Cast integers to floats, when floats are desired.
- Simplify error handling.
o SSL - When verifying the hostname against the certificate, only accept * (wildcard) for one level, i.e. *.example.com matches foo.example.com, but not www.foo.example.com. Previously, all levels were matched. - No longer accept MD2, MD5, and SHA1 as signature algorithms when verification is requested. MD2 and MD5 are outright dangerous at this point, and SHA1 should no longer be very relevant as web browsers already force CAs for several years to no longer issue any