Note missing functionality from current GnuTLS support.

[wget] / NEWS

diff --git a/NEWS b/NEWS
index b31eae2e3fc1abdf5415f9a7c9c5ce717c1d5c6f..ae96c0ea49c836c776fc971968b3332b7fd08273 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,12 +1,22 @@
 GNU Wget NEWS -- history of user-visible changes.
 
-Copyright (C) 1997-2006 Free Software Foundation, Inc.
+Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
+2006, 2007 Free Software Foundation, Inc.
 See the end for copying conditions.
 
 Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 \f
 * Changes in Wget 1.11.
 
+** TODO file removed: we use a bugtracker now; see
+http://wget.addictivecode.org/BugTracker. Also,
+http://wget.addictivecode.org/FeatureSpecifications.
+
+** Timestamping now uses the value from the most recent HTTP response,
+rather than the first one it got.
+
+** configure.in now requires autoconf >= 2.61, rather than 2.59.
+
 ** Authentication information is no longer sent as part of the Referer
 header in recursive fetches.
 
@@ -22,13 +32,20 @@ automatically, and continue to require a challenge for each resource.
 be the maximum number of HTTP redirects to follow.
 
 ** Wget now saves HTTP downloads using file names specified by the
-`Content-Disposition' header.  This is a standard way of specifying
-the file name used by many web dynamically generated pages.
-
-** The GnuTLS library is now also supported for https downloads.
-This is still work-in-progress.  OpenSSL is still used by default; use
---with-ssl=gnutls to build with GnuTLS.  OpenSSL is still required for
-NTLM authorization to work, but this should eventually change.
+`Content-Disposition' header.  This is a standard way of specifying the
+file name used by many web dynamically generated pages. For the time
+being, Content-Disposition is not used by default, to avoid the extra
+round-trips incurred (must specify "-e contentdisposition=yes"); this
+may change in a future version.
+
+** The GnuTLS library is now also experimentally supported for https
+downloads.  This is still work-in-progress.  OpenSSL is still used by
+default; use --with-ssl=gnutls to build with GnuTLS.  OpenSSL is still
+required for NTLM authorization to work, but this should eventually
+change. NOTE: Certificate verification is _not_ currently supported:
+this means that you can currently only use GnuTLS to encrypt
+connections, but _not_ to verify that a host is who it claims to be. Use
+of OpenSSL is suggested until this missing feature is implemented.
 
 ** The new option `--ignore-case' makes Wget ignore case when
 matching files, directories, and wildcards.  This affects the -X, -I,