X-Git-Url: http://git.zerfleddert.de/cgi-bin/gitweb.cgi/hmcfgusb/blobdiff_plain/e052333d36a748d0ecbf1304ce1acc6301f7895c..fe6f87a97b74a94fae97694038daae60f2b5f3dd:/README.md

diff --git a/README.md b/README.md
index 0071c6c..a658d7f 100644
--- a/README.md
+++ b/README.md
@@ -7,7 +7,7 @@ switches, sensors, ...).
 
 This repository contains, amongst others, an application, which emulates the
 HomeMatic LAN configuration adapter-protocol to make it possible to use the
-HM-CFG-USB in [Fhem][] or as a lan configuration tool for the CCU or the
+HM-CFG-USB in [Fhem][] or as a lan configuration tool for the [CCU][] or the
 HomeMatic windows configuration software, also supporting devices using
 AES-signing like [KeyMatic][].
 
@@ -18,6 +18,7 @@ AES-signing like [KeyMatic][].
 [HomeMatic]: http://www.homematic.com/
 [Fhem]: http://fhem.de/
 [KeyMatic]: http://www.elv.de/homematic-funk-tuerschlossantrieb-keymatic-silber-inkl-funk-handsender.html
+[CCU]: http://www.elv.de/homematic-zentrale-ccu-2.html
 
 ### Short hmland HowTo: ###
 
@@ -48,10 +49,10 @@ AES-signing like [KeyMatic][].
     ``attr hmusb hmId <hmId>``
 
 **Important compatibility information:**
-If older Fhem-versions (before 2015-06-19) or other software ([Homegear][],
-[LXCCU][], a real [CCU][], Windows configuration software, ...) is used
-to connect to hmland, the `-I` switch might be needed to impersonate a
-LAN-interface (this replaces the identity string HM-USB-IF with HM-LAN-IF).
+If older Fhem-versions (before 2015-06-19) or [Homegear][] before 2015-07-01
+is used to connect to hmland, the `-I` switch might be needed to
+impersonate a LAN-interface (this replaces the identity string HM-USB-IF with
+HM-LAN-IF). eQ-3 rfd (CCU and configuration software) works without this switch.
 Software which needs this will not keep a stable connection open to
 hmland without this switch. It was the hardcoded default in versions
 < 0.100.
@@ -59,11 +60,17 @@ hmland without this switch. It was the hardcoded default in versions
 This incompatibility is needed so connecting software is able to
 differentiate between HM-CFG-LAN and HM-CFG-USB.
 
+**Important security information:**
+Versions before 0.101 do not correctly transmit the AES channel-mask
+to the HM-CFG-USB, which results in signature-requests not being generated
+by the device in most cases. This can lead to processing of unsigned messages
+by the host-software. If you are relying on authenticated messages
+(with e.g. aesCommReq in Fhem) from devices like door-sensors and remotes,
+you should upgrade to at least version 0.101.
+
 [releases-directory]: https://git.zerfleddert.de/hmcfgusb/releases/
 [hmcfgusb-HEAD-xxxxxxx.tar.gz]: https://git.zerfleddert.de/cgi-bin/gitweb.cgi/hmcfgusb/snapshot/HEAD.tar.gz
 [Homegear]: https://www.homegear.eu/
-[LXCCU]: http://www.lxccu.com/
-[CCU]: http://www.elv.de/homematic-zentrale-ccu-2.html
 
 ### Updating the HM-CFG-USB firmware to version 0.967: ###