Improved hostname detection: Little Snitch now takes the port and protocol of a connection into account, handles HTTPS DNS records more accurately and finds the real hostname of connections that use Encrypted Client Hello more often.
The connection alert now explains when a hostname could not be determined, for example because the connection uses Encrypted Client Hello or the name could not be verified.
Little Snitch no longer queries ipv4only.arpa every few seconds, which reduces DNS traffic and system load.
Improved the speed of filtering connections in the Network Monitor when apps of the iOS Simulator are among them.
Improved tracking of active connections: detect more reliably when a connection was already closed.
Improved cooperation with other network extensions.
Little Snitch no longer loses your configuration for good when it cannot read its encryption key from the keychain. It keeps the previous data and offers to restore it with the password of the old key from Keychain Access, or to delete it.
Bug Fixes
Fixed crashes in the Rules window, including one that could occur shortly after the rule list was rebuilt and one that could occur when the “Automatic Profile Switching” setting was changed before the Rules window was opened.
Fixed a crash in the Network Monitor with certain hierarchy arrangements, for example when focusing on a host.
Fixed a possible crash of the command line tool when capturing traffic without authorization.
Fixed increased disk and memory use of the traffic log on Apple silicon. Fixed several issues that could truncate or misreport the traffic history.
Fixed an issue where connections of network extensions were never shown in the Network Monitor.
Fixed alerts of the Little Snitch agent that could be invisible, and a connection alert that did not react to the mouse while another alert was open.
Fixed a duplicated menu bar icon.
Fixed various problems with DNS responses containing unusual HTTPS records.
Various other bug fixes and improvements under the hood.