2 This file covers only non-trivial user-visible changes;
3 see the git log for full gory details.
6 * SECURITY FIX: Restrict TOFU-trust of a certificate to a single service. Previous behaviour could be exploited for a MitM attack, by convincing the user to accept a certificate for one host, then using it in a MitM for another host.
7 * Immediately run commands entered in pager mode
9 * Tell user if a certificate has been temporarily trusted before
12 * Drop targets of "log" from queues
13 * Preserve history when using relative links (e.g. "2?foo")
14 * Document backslash escapes in query
17 * Allow pre-fetched items in queue, with new "fetch" command to add them
18 * Add named queues, e.g. foo~
19 * Implement notation for (n-from) last element of a list, e.g. _$, _$2, _5-$2
20 * Run default action on a history item when going to it, e.g. with <
21 * Don't shell-quote explicit '%s' arguments, only implicit final argument
24 * Improve wrapping and paging with long words, wide chars, or thin terminals
25 * Shell-quote arguments to 'browse' and '!'
26 * Save uri with null last path segment under penultimate segment / hostname
27 * Sort file:// directory listings
30 * Use standard PEM/DER format for identities, allowing import/export
31 * Optionally generate Ed25519 client certificates ("TARGET id NAME ed")
32 * Require confirmation before following redirect into scope of identity
33 * TOFU-trust by default even if there are V3 or NameMismatch errors
36 * Handle ^C during streaming by truncating the stream
37 * Always request when going to uris using an identity
40 * Use canonical notBefore (00:00:00 1 Jan 1950) in client certs
41 * Add --prompt option, enabling usual command prompt after -e/-f
43 * Fix colouring of wrapped link descriptions being lost when paging
44 * Fix --ghost not affecting queue loading
47 * New command "query" for e.g. convenient use of search engines
48 * Allow IRIs in user input (converted to URIs)
49 * Implement SOCKS5 support (-S and -P options)
50 * Fix bug triggered by /home being a symlink
51 * Fix bug with connecting to literal IPv6 addresses
54 * Align and wrap link lines; add option to print description first
55 * Use reverse video in prompt for added visibility (thanks Ben)
56 * Try all addresses when making connections (thanks rwv)
57 * Improve behaviour in non-interactive mode; add --batch to enable it
58 * Fix X.509 version and use dummy notAfter in generated client certificates
59 * Fix bugs in wrapping and relative link display
62 * Indicate links to cached history items
63 * Retry with full handshake if session resume fails
64 * Recommend trust for new certificate signed by previous certificate
65 * Increase client cert validity to 50y
66 * Make ghost mode even more spectral
69 * Allow trusting certificates just for the current session
70 * Don't require tail certificates to be v3
71 * Add uri of any request to log, even if request fails
72 * Just show fingerprint of known cert rather than picture
75 * Add @ target modifier for history root
77 * Suppress alt text by default
78 * Fix: uri quoting for queries and file:// was incorrect
79 * Fix: queue was not appended to on exit in non-interactive mode