TODO: Add "Share CA cache" + "CA caching to more TLS backends"

Closes #13787

diff --git a/docs/TODO b/docs/TODO
index e5bf092433fb0c96f7132ae2f647c8c5eb89ca1b..4166f2ee452cd6b9c4765fa8c0d2f5d3da5cf63f 100644 (file)
--- a/docs/TODO
+++ b/docs/TODO
@@ -126,6 +126,8 @@
  13.13 Make sure we forbid TLS 1.3 post-handshake authentication
  13.14 Support the clienthello extension
  13.15 Select signature algorithms
+ 13.16 Share the CA cache
+ 13.17 Add CA caching to more TLS backends
 
  14. GnuTLS
  14.2 check connection
@@ -921,6 +923,19 @@
 
  https://github.com/curl/curl/issues/12982
 
+13.16 Share the CA cache
+
+ For TLS backends that supports CA caching, it makes sense to allow the share
+ object to be used to store the CA cache as well via the share API. Would
+ allow multiple easy handles to reuse the CA cache and save themselves from a
+ lot of extra processing overhead.
+
+13.17 Add CA caching to more TLS backends
+
+ The ability to cache the CA store between invokes can improve transfer
+ performance signficantly. In curl 8.9.0, only OpenSSL, Schannel and wolfSSL
+ support this.
+
 14. GnuTLS
 
 14.2 check connection