X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=TODO;h=c199e8ea80fd7e30793adc617abeb3665b8f0906;hb=47756107f43d63480c4000339266cf54abae3766;hp=558b9e3e4804328ae43cc1d0c48d61e3fea68ceb;hpb=0f3712d675247c7bff0e94d365ec3fa26d5fda57;p=privoxy.git

diff --git a/TODO b/TODO
index 558b9e3e..c199e8ea 100644
--- a/TODO
+++ b/TODO
@@ -377,7 +377,7 @@ https://www.privoxy.org/donate
      currently can result in client requests to config.privoxy.org on the
      Internet which may not be desirable.
 
-150) Add blacklistd support.
+150) Add blocklistd support (https://man.netbsd.org/blocklistd.8).
 
 151) Let the dok-tidy target work cross-platform without introducing
      a ton of white-space changes that hide the content changes.
@@ -475,7 +475,7 @@ https://www.privoxy.org/donate
      when https inspecting while using a forwarding proxy.
 
 184) Add support for wolfSSL. Work in progress, expected to be
-     committed after the 3.0.33 release. Funded with donations
+     committed after the 3.0.34 release. Funded with donations
      made to the Privoxy project.
 
 185) The mbedTLS and OpenSSL versions of generate_host_certificate()
@@ -532,6 +532,13 @@ https://www.privoxy.org/donate
 200) Add a config directive that causes Privoxy to remove all
      host certificates before exiting.
 
+201) Add an action to change the trusted-cas-file for a section.
+     This should be useful in countries where a person-in-the-middle
+     attack is known to happen on some domains but should not be tolerated
+     on others. It would also allow to limit the accepted CA certificates
+     for given domains instead of accepting all that are specified with
+     the trusted-cas-file directive.
+
 ##########################################################################
 
 Hosting wish list (relevant for #53)