Note missing functionality from current GnuTLS support.

[wget] / NEWS

diff --git a/NEWS b/NEWS
index 3393be2c54ffd6fafc6bf0245f123ff3400a10cb..ae96c0ea49c836c776fc971968b3332b7fd08273 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -38,10 +38,14 @@ being, Content-Disposition is not used by default, to avoid the extra
 round-trips incurred (must specify "-e contentdisposition=yes"); this
 may change in a future version.
 
-** The GnuTLS library is now also supported for https downloads.
-This is still work-in-progress.  OpenSSL is still used by default; use
---with-ssl=gnutls to build with GnuTLS.  OpenSSL is still required for
-NTLM authorization to work, but this should eventually change.
+** The GnuTLS library is now also experimentally supported for https
+downloads.  This is still work-in-progress.  OpenSSL is still used by
+default; use --with-ssl=gnutls to build with GnuTLS.  OpenSSL is still
+required for NTLM authorization to work, but this should eventually
+change. NOTE: Certificate verification is _not_ currently supported:
+this means that you can currently only use GnuTLS to encrypt
+connections, but _not_ to verify that a host is who it claims to be. Use
+of OpenSSL is suggested until this missing feature is implemented.
 
 ** The new option `--ignore-case' makes Wget ignore case when
 matching files, directories, and wildcards.  This affects the -X, -I,