We have released nghttp2 v1.68.0.

Do not download the archive files generated by GitHub. They do not work. Please download the signed and versioned tar balls, such as nghttp2-1.68.0.tar.gz.

lib

This release adds more glitch counters for the unexpected builtin extension frames.

h2load

This release changes the default QUIC window-bits to 24 to reduce the fragmentation on huge packet losses.

nghttpd

This release makes the supported groups configurable with --groups option.

nghttpx

TLSv1.0 and TLSv1.1 support has been dropped.

ML-DSA certificates are now selected over ECDSA and RSA. ML-DSA certificates are supported by OpenSSL and wolfSSL TLS backends.

Certificate selection based on client capability is extended to wolfSSL and BoringSSL.

--group option has been added. --ecdh-curves option has been deprecated, and if it is used, it is treated as if --group option is used.