X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=TODO;h=c199e8ea80fd7e30793adc617abeb3665b8f0906;hb=ace690863b1095f0afb0281917638e9dca3d2991;hp=11b4d8068003ad1fa06a175ddbc45d126a7f4191;hpb=8c14f921e09f726b591707e0a4f09d51c2be2803;p=privoxy.git

diff --git a/TODO b/TODO
index 11b4d806..c199e8ea 100644
--- a/TODO
+++ b/TODO
@@ -377,7 +377,7 @@ https://www.privoxy.org/donate
      currently can result in client requests to config.privoxy.org on the
      Internet which may not be desirable.
 
-150) Add blacklistd support.
+150) Add blocklistd support (https://man.netbsd.org/blocklistd.8).
 
 151) Let the dok-tidy target work cross-platform without introducing
      a ton of white-space changes that hide the content changes.
@@ -532,6 +532,13 @@ https://www.privoxy.org/donate
 200) Add a config directive that causes Privoxy to remove all
      host certificates before exiting.
 
+201) Add an action to change the trusted-cas-file for a section.
+     This should be useful in countries where a person-in-the-middle
+     attack is known to happen on some domains but should not be tolerated
+     on others. It would also allow to limit the accepted CA certificates
+     for given domains instead of accepting all that are specified with
+     the trusted-cas-file directive.
+
 ##########################################################################
 
 Hosting wish list (relevant for #53)