Comment by john_strinlai
4 days ago
>This was reported to us by Konstantinos Maninakis on 2026-06-24.
announcement 3 months later is not super great, considering that the current advice is "Stop using private repositories (over the network) until the security update is released."
Also: user guide still mentions supporting private repositories [0]
FAQ still says that "Radicle supports private repositories [...] completely invisible to the rest of the network" [1]
[0] https://radicle.dev/guides/user#initializing-a-private-repos...
[1] https://radicle.dev/faq
Thank you for noticing. We need to fix that.
Also https://radicle.dev/guides/protocol#transport-encryption--pr...
"Transport Encryption & Privacy: Connections between peers in the Radicle network are encrypted using a Noise protocol handshake. [...] After the handshake phase is completed, all data exchanged between peers is fully encrypted and benefits from strong forward secrecy, ensuring secure and private communications across the network."
I was floored that they emailed me about it for the first time today saying "of course you already know all the details from the blog post".
Me: "No!"
For the record, that is not what the Zulip announcement wrote. Please don't kick us when we're down.