X-Git-Url: http://pileus.org/git/?a=blobdiff_plain;f=TODO.txt;h=7a0eeb0b4ddb5d2a9a900c54d00f43df8f9a5990;hb=910d5a2f852edb8c4e54c0e875da6a90385ab790;hp=ad82cf7923192b1998eb5054547cee1c757ea783;hpb=20536148dfccf17fd1be5be2b98b4dc74500282f;p=~andy%2Ffetchmail

diff --git a/TODO.txt b/TODO.txt
index ad82cf79..7a0eeb0b 100644
--- a/TODO.txt
+++ b/TODO.txt
@@ -1,6 +1,10 @@
 Note that there is a separate todo.html with different content than this.
 
 soon - MUST:
+- blacklist DigiNotar/Comodo/Türktrust hacks/certs, possibly with Chrome's serial#
+  list?
+- check if wildcards from X.509 are handled as strictly as required by
+  the RFCs.
 - audit if there are further untrusted data report_*() calls.
 - Debian Bug #475239, MIME decoder may break up words (need to quote results)
 - put bare IP addresses in brackets for SMTP (check if there are RFC
@@ -16,6 +20,7 @@ soon - MUST:
   Postfix virtual users" around 2009-09-23 on fetchmail-users@).
 
 soon - SHOULD:
+- support NIL and strings where they are alternatives to literals
 - Debian Bug #531589: fetchmail ignores SIGUSR1 in idle mode.
   seems non-trivial to fix: in imap_idle(), we wait for untagged
   responses, and may be deep in SSL_peek -- and that restarts the
@@ -61,7 +66,7 @@ questionable:
 - fetch IMAP message in one go (fetchmail-devel by Adam Simpkins
   <simpkins@cisco.com> around Nov 2nd)?
 
-6.4:
+7.0:
 - Properly free host/user entries (through C++ class instantiation and destructors...)
 - Remove stupid options, such as spambounce, or deferred bounces for anything
   but wrong addresses