add location for the xpi download

[monkeysphere.git] / doc / TODO

diff --git a/doc/TODO b/doc/TODO
index 0d72b25ac4e07734597b552093ac7bfce2fad448..d365ac7e357268f2d6679c7bfac04bedcc2a943a 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -9,47 +9,8 @@ Handle unverified monkeysphere hosts in such a way that they're not
    always removed from known_hosts file.  Ask user to lsign the host
    key?
 
    always removed from known_hosts file.  Ask user to lsign the host
    key?
 

-Handle multiple hostnames (multiple user IDs?) when generating host
-   keys with gen-key.
-
-Work out the details (and describe a full use case) for assigning a
-   REVOKER during monkeysphere-server gen_key -- how is this set?  How
-   do we export it so it's available when a second-party revocation is
-   needed?
-
-Actually enable server hostkey publication.
-
-Streamline host key generation, publication, verification.  See
-   doc/george/host-key-publication for what dkg went through on
-   2008-06-19
-
-Ensure that authorized_user_ids are under as tight control as ssh
-   expects from authorized_keys: we don't want monkeysphere to be a
-   weak link in the filesystem.
-
-Consider the default permissions for
-   /var/lib/monkeysphere/authorized_keys/* (and indeed the whole
-   directory path leading up to that)
-
-Make sure alternate ports are handled for known_hosts.
-
-Script to import private key into ssh agent.
-
-Provide a friendly interactive UI for marginal or failing client-side
-   hostkey verifications.  Handle the common cases smoothly, and
-   provide good debugging info for the unusual cases.
-
-Make sure onak properly escapes user IDs with colons in them.
-
-Build a decent, presentable web site for documentation, evangelism,
-   etc.  Include a mention of how to report trouble or concerns.
-
-Create ssh2openpgp or convert to full-fledged keytrans.
-

 Resolve the bugs listed in openpgp2ssh(1):BUGS.
 
 Resolve the bugs listed in openpgp2ssh(1):BUGS.
 

-Understand and document alternate trustdb models.
-

 Understand and document the output of gpg --check-trustdb:
  gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
  gpg: depth: 0  valid:   2  signed:  20  trust: 0-, 0q, 0n, 0m, 0f, 2u
 Understand and document the output of gpg --check-trustdb:
  gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
  gpg: depth: 0  valid:   2  signed:  20  trust: 0-, 0q, 0n, 0m, 0f, 2u


@@ -72,19 +33,9 @@ Make it easier to do domain-relative ssh host trust signatures with
 
 Fix the order of questions when user does a tsign in gpg or gpg2.
 
 
 Fix the order of questions when user does a tsign in gpg or gpg2.
 

-File bug against ssh-keygen about how "-R" option removes comments
-   from known_hosts file.
-
-File bug against ssh-keygen to see if we can get it to write to hash a
-   known_hosts file to/from stdout/stdin.
-

 When using ssh-proxycommand, if only host keys found are expired or
    revoked, then output loud warning with prompt, or fail hard.
 
 When using ssh-proxycommand, if only host keys found are expired or
    revoked, then output loud warning with prompt, or fail hard.
 

-File bug against seahorse about how, when creating new primary keys,
-   it presents option for "RSA (sign only)" but then creates an "esca"
-   key.
-

 File bug against enigmail about lack of ability to create subkeys.
 
 Test and document what happens when any filesystem that the
 File bug against enigmail about lack of ability to create subkeys.
 
 Test and document what happens when any filesystem that the


@@ -94,3 +45,7 @@ Test and document what happens when any filesystem that the
 Optimize keyserver access, particularly on monkeysphere-server
    update-users -- is there a way to query the keyserver all in a
    chunk?
 Optimize keyserver access, particularly on monkeysphere-server
    update-users -- is there a way to query the keyserver all in a
    chunk?

+
+Think about packaging monkeysphere for other (non-apt-based) operating
+   systems.  RPM-based linux systems, FreeBSD ports, and Mac OS X seem
+   like the most likely candidates.