2 This file covers only non-trivial user-visible changes;
3 see the git log for full gory details.
6 * Switch tls dependency to tls-2.0; deprecated ciphers dropped
7 * Handle 44 response with exponential backoff
8 * Fix regression wherein queue files weren't read after start
12 * Run $EDITOR on input/query ending with backslash
13 * Strip all control characters (including ANSI formatting) outside preformatted blocks
16 * Set CLIENT_CERT and CLIENT_KEY environment variables when invoking external commands
17 * Improve wrapping of lines with words longer than the screen width
20 * SECURITY FIX: Restrict TOFU-trust of a certificate to a single service. Previous behaviour could be exploited for a MitM attack, by convincing the user to accept a certificate for one host, then using it in a MitM for another host.
21 * Immediately run commands entered in pager mode
23 * Tell user if a certificate has been temporarily trusted before
26 * Drop targets of "log" from queues
27 * Preserve history when using relative links (e.g. "2?foo")
28 * Document backslash escapes in query
31 * Allow pre-fetched items in queue, with new "fetch" command to add them
32 * Add named queues, e.g. foo~
33 * Implement notation for (n-from) last element of a list, e.g. _$, _$2, _5-$2
34 * Run default action on a history item when going to it, e.g. with <
35 * Don't shell-quote explicit '%s' arguments, only implicit final argument
38 * Improve wrapping and paging with long words, wide chars, or thin terminals
39 * Shell-quote arguments to 'browse' and '!'
40 * Save uri with null last path segment under penultimate segment / hostname
41 * Sort file:// directory listings
44 * Use standard PEM/DER format for identities, allowing import/export
45 * Optionally generate Ed25519 client certificates ("TARGET id NAME ed")
46 * Require confirmation before following redirect into scope of identity
47 * TOFU-trust by default even if there are V3 or NameMismatch errors
50 * Handle ^C during streaming by truncating the stream
51 * Always request when going to uris using an identity
54 * Use canonical notBefore (00:00:00 1 Jan 1950) in client certs
55 * Add --prompt option, enabling usual command prompt after -e/-f
57 * Fix colouring of wrapped link descriptions being lost when paging
58 * Fix --ghost not affecting queue loading
61 * New command "query" for e.g. convenient use of search engines
62 * Allow IRIs in user input (converted to URIs)
63 * Implement SOCKS5 support (-S and -P options)
64 * Fix bug triggered by /home being a symlink
65 * Fix bug with connecting to literal IPv6 addresses
68 * Align and wrap link lines; add option to print description first
69 * Use reverse video in prompt for added visibility (thanks Ben)
70 * Try all addresses when making connections (thanks rwv)
71 * Improve behaviour in non-interactive mode; add --batch to enable it
72 * Fix X.509 version and use dummy notAfter in generated client certificates
73 * Fix bugs in wrapping and relative link display
76 * Indicate links to cached history items
77 * Retry with full handshake if session resume fails
78 * Recommend trust for new certificate signed by previous certificate
79 * Increase client cert validity to 50y
80 * Make ghost mode even more spectral
83 * Allow trusting certificates just for the current session
84 * Don't require tail certificates to be v3
85 * Add uri of any request to log, even if request fails
86 * Just show fingerprint of known cert rather than picture
89 * Add @ target modifier for history root
91 * Suppress alt text by default
92 * Fix: uri quoting for queries and file:// was incorrect
93 * Fix: queue was not appended to on exit in non-interactive mode