X-Git-Url: http://pileus.org/git/?a=blobdiff_plain;f=TODO.txt;h=f317b3813ac10e48ebb741abda0b25b3aa06282a;hb=f16d8d23439b5569f0c2e1af22494708b507f277;hp=2827bafb289682eabd50d1743ea56a2d19747f28;hpb=77317bf3d6d96a3ca580ea38039ceed23026dcdf;p=~andy%2Ffetchmail diff --git a/TODO.txt b/TODO.txt index 2827bafb..f317b381 100644 --- a/TODO.txt +++ b/TODO.txt @@ -1,15 +1,14 @@ Note that there is a separate todo.html with different content than this. soon - MUST: +- blacklist DigiNotar/Comodo hacks/certs, possibly with Chrome's serial# + list? +- check if wildcards from X.509 are handled as strictly as required by + the RFCs. - audit if there are further untrusted data report_*() calls. - Debian Bug #475239, MIME decoder may break up words (need to quote results) - put bare IP addresses in brackets for SMTP (check if there are RFC 1123/5321/5322 differences) -- Debian Bug #531589: fetchmail ignores SIGUSR1 in idle mode. - seems non-trivial to fix: in imap_idle(), we wait for untagged - responses, and may be deep in SSL_peek -- and that restarts the - underlying blocking read() from the socket, so we never break out of - the SSL_peek() with SIGUSR1. - Fix further occurrences of SMTP reply code handling: - for proper smtp_reponse caching of multiline codes (there are some) - for stomping over control characters. @@ -21,6 +20,12 @@ soon - MUST: Postfix virtual users" around 2009-09-23 on fetchmail-users@). soon - SHOULD: +- support NIL and strings where they are alternatives to literals +- Debian Bug #531589: fetchmail ignores SIGUSR1 in idle mode. + seems non-trivial to fix: in imap_idle(), we wait for untagged + responses, and may be deep in SSL_peek -- and that restarts the + underlying blocking read() from the socket, so we never break out of + the SSL_peek() with SIGUSR1. - add repoll for all kinds of auth failures (requires framework to track which auth failed in auto mode) - SockOpen sometimes exits with errno == 0, confusing users (found with @@ -61,7 +66,7 @@ questionable: - fetch IMAP message in one go (fetchmail-devel by Adam Simpkins around Nov 2nd)? -6.4: +7.0: - Properly free host/user entries (through C++ class instantiation and destructors...) - Remove stupid options, such as spambounce, or deferred bounces for anything but wrong addresses