Note missing functionality from current GnuTLS support.

[wget] / NEWS

diff --git a/NEWS b/NEWS
index f7ae1f44e2548f7fb94babaa89b808fcb7d7c036..ae96c0ea49c836c776fc971968b3332b7fd08273 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,7 @@
 GNU Wget NEWS -- history of user-visible changes.
 
-Copyright (C) 1997-2006 Free Software Foundation, Inc.
+Copyright (C) 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005,
+2006, 2007 Free Software Foundation, Inc.
 See the end for copying conditions.
 
 Please send GNU Wget bug reports to <bug-wget@gnu.org>.
@@ -37,10 +38,14 @@ being, Content-Disposition is not used by default, to avoid the extra
 round-trips incurred (must specify "-e contentdisposition=yes"); this
 may change in a future version.
 
-** The GnuTLS library is now also supported for https downloads.
-This is still work-in-progress.  OpenSSL is still used by default; use
---with-ssl=gnutls to build with GnuTLS.  OpenSSL is still required for
-NTLM authorization to work, but this should eventually change.
+** The GnuTLS library is now also experimentally supported for https
+downloads.  This is still work-in-progress.  OpenSSL is still used by
+default; use --with-ssl=gnutls to build with GnuTLS.  OpenSSL is still
+required for NTLM authorization to work, but this should eventually
+change. NOTE: Certificate verification is _not_ currently supported:
+this means that you can currently only use GnuTLS to encrypt
+connections, but _not_ to verify that a host is who it claims to be. Use
+of OpenSSL is suggested until this missing feature is implemented.
 
 ** The new option `--ignore-case' makes Wget ignore case when
 matching files, directories, and wildcards.  This affects the -X, -I,