X-Git-Url: http://pileus.org/git/?a=blobdiff_plain;f=TODO.txt;h=f5c3456261c4f25d1c6ce72375f6d6654508d49b;hb=d31db10231e9ed89f64fdf6e0fb7cae182aa377e;hp=ad82cf7923192b1998eb5054547cee1c757ea783;hpb=20536148dfccf17fd1be5be2b98b4dc74500282f;p=~andy%2Ffetchmail

diff --git a/TODO.txt b/TODO.txt
index ad82cf79..f5c34562 100644
--- a/TODO.txt
+++ b/TODO.txt
@@ -1,6 +1,10 @@
 Note that there is a separate todo.html with different content than this.
 
 soon - MUST:
+- blacklist DigiNotar/Comodo hacks/certs, possibly with Chrome's serial#
+  list?
+- check if wildcards from X.509 are handled as strictly as required by
+  the RFCs.
 - audit if there are further untrusted data report_*() calls.
 - Debian Bug #475239, MIME decoder may break up words (need to quote results)
 - put bare IP addresses in brackets for SMTP (check if there are RFC
@@ -16,6 +20,7 @@ soon - MUST:
   Postfix virtual users" around 2009-09-23 on fetchmail-users@).
 
 soon - SHOULD:
+- support NIL and strings where they are alternatives to literals
 - Debian Bug #531589: fetchmail ignores SIGUSR1 in idle mode.
   seems non-trivial to fix: in imap_idle(), we wait for untagged
   responses, and may be deep in SSL_peek -- and that restarts the