X-Git-Url: http://sjero.net/git/?a=blobdiff_plain;f=NEWS;h=f7ae1f44e2548f7fb94babaa89b808fcb7d7c036;hb=29dea5f7d7bec621ef2c10c80d517477e10c4ac4;hp=4d3a51b0785507cccf583ef303867a72014d6f11;hpb=bcb055884bc0d78d8af37fa2823e67f53a7a9018;p=wget

diff --git a/NEWS b/NEWS
index 4d3a51b0..f7ae1f44 100644
--- a/NEWS
+++ b/NEWS
@@ -7,9 +7,35 @@ Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 
 * Changes in Wget 1.11.
 
+** TODO file removed: we use a bugtracker now; see
+http://wget.addictivecode.org/BugTracker. Also,
+http://wget.addictivecode.org/FeatureSpecifications.
+
+** Timestamping now uses the value from the most recent HTTP response,
+rather than the first one it got.
+
+** configure.in now requires autoconf >= 2.61, rather than 2.59.
+
+** Authentication information is no longer sent as part of the Referer
+header in recursive fetches.
+
+** No authentication credentials are sent until a challenge is issued,
+for improved security. Authentication handling is still not
+RFC-compliant, as once a Basic challenge has been received, it will
+assume it can send credentials to any URL at that same host, and not
+just the ones at or below the original authenticated location.
+Credentials for Digest authentication are still never saved or issued
+automatically, and continue to require a challenge for each resource.
+
+** Added --max-redirect option, allowing the user to specify what should
+be the maximum number of HTTP redirects to follow.
+
 ** Wget now saves HTTP downloads using file names specified by the
-`Content-Disposition' header.  This is a standard way of specifying
-the file name used by many web dynamically generated pages.
+`Content-Disposition' header.  This is a standard way of specifying the
+file name used by many web dynamically generated pages. For the time
+being, Content-Disposition is not used by default, to avoid the extra
+round-trips incurred (must specify "-e contentdisposition=yes"); this
+may change in a future version.
 
 ** The GnuTLS library is now also supported for https downloads.
 This is still work-in-progress.  OpenSSL is still used by default; use