Add: H3 support - incomplete

README.md

@@ -81,14 +81,17 @@ Command flags (implemented):
 - `sys route`: `--ipv4`, `--ipv6`, `--to <ip>`
 - `ports listen`: `--tcp`, `--udp`, `--port <n>`
 - `neigh list`: `--ipv4`, `--ipv6`, `--iface <name>`
+- `ports conns`: `--top <n>`, `--by-process`
+- `cert baseline`: `<path>`
+- `cert diff`: `<path>`
 - `probe ping`: `--count <n>`, `--timeout-ms <n>`, `--interval-ms <n>`, `--no-geoip`
 - `probe tcping`: `--count <n>`, `--timeout-ms <n>`, `--socks5 <url>`, `--prefer-ipv4`, `--no-geoip`
 - `probe trace`: `--max-hops <n>`, `--per-hop <n>`, `--timeout-ms <n>`, `--udp`, `--port <n>`, `--rdns`, `--no-geoip`
 - `dns query`: `--server <ip[:port]>`, `--transport <udp|tcp|dot|doh>`, `--tls-name <name>`, `--socks5 <url>`, `--prefer-ipv4`, `--timeout-ms <n>`
 - `dns detect`: `--servers <csv>`, `--transport <udp|tcp|dot|doh>`, `--tls-name <name>`, `--socks5 <url>`, `--prefer-ipv4`, `--repeat <n>`, `--timeout-ms <n>`
 - `dns watch`: `--duration <Ns|Nms>`, `--iface <name>`, `--filter <pattern>`
-- `http head|get`: `--timeout-ms <n>`, `--follow-redirects <n>`, `--show-headers`, `--show-body`, `--max-body-bytes <n>`, `--http1-only`, `--http2-only`, `--geoip`, `--socks5 <url>`
-- `tls handshake|cert|verify|alpn`: `--sni <name>`, `--alpn <csv>`, `--timeout-ms <n>`, `--insecure`, `--socks5 <url>`, `--prefer-ipv4`
+- `http head|get`: `--timeout-ms <n>`, `--follow-redirects <n>`, `--show-headers`, `--show-body`, `--max-body-bytes <n>`, `--http1-only`, `--http2-only`, `--http3` (feature `http3`), `--http3-only` (feature `http3`), `--geoip`, `--socks5 <url>`
+- `tls handshake|cert|verify|alpn`: `--sni <name>`, `--alpn <csv>`, `--timeout-ms <n>`, `--insecure`, `--socks5 <url>`, `--prefer-ipv4`, `--show-extensions`, `--ocsp`
 - `discover mdns`: `--duration <Ns|Nms>`, `--service <type>`
 - `discover ssdp`: `--duration <Ns|Nms>`
 - `diag`: `--out <path>`, `--bundle <path>`, `--dns-detect <domain>`, `--dns-timeout-ms <n>`, `--dns-repeat <n>`
@@ -112,6 +115,14 @@ Install:
 cmake --build build --target install
 ```
 
+## HTTP/3 (experimental)
+HTTP/3 support is feature-gated and incomplete. Do not enable it in production builds yet.
+
+To enable locally for testing:
+```bash
+cargo run -p wtfnet-cli --features wtfnet-http/http3 -- http head https://cloudflare-quic.com --http3
+```
+
 ## Roadmap
 ### v0.1 (MVP)
 - sys: ifaces/ip/route/dns
@@ -135,8 +146,8 @@ cmake --build build --target install
 - TLS extras: OCSP stapling indicator, richer cert parsing
 - ports conns improvements (top talkers / summary)
 - better baseline/diff for system roots
-- optional HTTP/3 (feature-gated)
 - optional LLMNR/NBNS discovery
+- optional HTTP/3 (feature-gated; experimental, incomplete)
 
 ## Current stage
 Implemented: