X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=TODO;h=a2063e9ebee2a2fa6d625493f7f062fc07f3457a;hb=34635bf163b1b2860bbb0b6c9550b40196e5acd3;hp=be42852266d0386873e46b992aaf5c3706ccfb53;hpb=4e244a32bec8c1b3522dd3d8875a0ad4d3831efa;p=privoxy.git

diff --git a/TODO b/TODO
index be428522..a2063e9e 100644
--- a/TODO
+++ b/TODO
@@ -439,7 +439,7 @@ https://www.privoxy.org/donate
 169) Preserve all relevant copyright and license statements in binary
      packages we distribute.
 
-170) Serve the ca-cert-file through the CGI interface so client's
+170) Serve the ca-cert-file through the CGI interface so clients
      can conveniently import it (insecurely).
 
 171) Create a "view page using Privoxy" website where users can input
@@ -479,7 +479,8 @@ https://www.privoxy.org/donate
      when https inspecting while using a forwarding proxy.
 
 184) Add support for wolfSSL. Work in progress, expected to be
-     committed after the 3.0.30 release.
+     committed after the 3.0.32 release. Funded with donations
+     made to the Privoxy project.
 
 185) The mbedTLS and OpenSSL versions of generate_host_certificate()
      should only be called when necessary and the check should be
@@ -496,6 +497,36 @@ https://www.privoxy.org/donate
        # Copyright ...
        #
 
+189) Bring back binary packages for macOS, preferably for both Intel and M1.
+     The first step would be getting at least one build system, either
+     donated or bought with donations earmarked for this.
+     Interested donors: 0.
+
+190) The socks5 authentication code should send user name an password
+     seperately or we should increase the cbuf size to allow longer
+     user names and passwords.
+
+191) The cipher-list directive should be split into cipher-list-server
+     and cipher-list-client.
+
+192) The client TLS contexts should probably be shared among threads
+     to spend less time and memory loading the root certificates.
+
+193) Use SHA256 instead of MD5 for the host hash used when generating file
+     names for host certificates and keys.
+
+194) There should be a way to force gif deanimation if the server does not
+     declare the content as gif.
+
+195) We should probably cache the server TLS contexts.
+
+196) Investigate if it's worth adding an optional mutex for the CGI handler.
+     Could reduce memory use and increase performance on single core systems
+     for some tests.
+
+197) Investigate if parts of Privoxy should get optional replacements
+     written in Rust.
+
 ##########################################################################
 
 Hosting wish list (relevant for #53)