X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=TODO;h=c199e8ea80fd7e30793adc617abeb3665b8f0906;hb=ace690863b1095f0afb0281917638e9dca3d2991;hp=73ac85acf945a8a5307631aa4594a9f4d703a448;hpb=274bd3722e96035c0418a240a9ac9ae4467979d0;p=privoxy.git

diff --git a/TODO b/TODO
index 73ac85ac..c199e8ea 100644
--- a/TODO
+++ b/TODO
@@ -189,7 +189,7 @@ https://www.privoxy.org/donate
 86) Add a server-body-tagger action. This is trivial as as all the
     functionality required to do it already exists.
 
-87) Add a client-body-tagger action. This, too, is trivial.
+87) Add a client-body-tagger action. Work in progress.
 
 88) Investigate if there's a Perl module that Privoxy-Regression-Test
     could optionally use to keep connections alive, preferably while
@@ -377,7 +377,7 @@ https://www.privoxy.org/donate
      currently can result in client requests to config.privoxy.org on the
      Internet which may not be desirable.
 
-150) Add blacklistd support.
+150) Add blocklistd support (https://man.netbsd.org/blocklistd.8).
 
 151) Let the dok-tidy target work cross-platform without introducing
      a ton of white-space changes that hide the content changes.
@@ -475,7 +475,7 @@ https://www.privoxy.org/donate
      when https inspecting while using a forwarding proxy.
 
 184) Add support for wolfSSL. Work in progress, expected to be
-     committed after the 3.0.32 release. Funded with donations
+     committed after the 3.0.34 release. Funded with donations
      made to the Privoxy project.
 
 185) The mbedTLS and OpenSSL versions of generate_host_certificate()
@@ -532,6 +532,13 @@ https://www.privoxy.org/donate
 200) Add a config directive that causes Privoxy to remove all
      host certificates before exiting.
 
+201) Add an action to change the trusted-cas-file for a section.
+     This should be useful in countries where a person-in-the-middle
+     attack is known to happen on some domains but should not be tolerated
+     on others. It would also allow to limit the accepted CA certificates
+     for given domains instead of accepting all that are specified with
+     the trusted-cas-file directive.
+
 ##########################################################################
 
 Hosting wish list (relevant for #53)