added more documentation about george, and more TODO notes.

[monkeysphere.git] / doc / TODO

diff --git a/doc/TODO b/doc/TODO
index 0402b46459a44641249a4e71c05cc89e3e875182..e2fce0e8f7a10f45f4cd43751a835d81a13b905c 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -1,12 +1,40 @@
 Next-Steps Monkeysphere Projects:
 ---------------------------------
 
 Next-Steps Monkeysphere Projects:
 ---------------------------------
 

-Handle unknown hosts in such a way that they're not always removed
-   from known_hosts file.  Ask user to lsign the host key?
+Detail advantages of monkeysphere: detail the race conditions in ssh,
+   and how the monkeysphere can help you reduce these threat vectors:
+   threat model reduction diagrams.
+
+Determine how openssh handles multiple processes writing to
+   known_hosts/authorized_keys files (lockfile, atomic appends?)
+
+Handle unverified monkeysphere hosts in such a way that they're not
+   always removed from known_hosts file.  Ask user to lsign the host
+   key?

 
 Handle multiple hostnames (multiple user IDs?) when generating host
    keys with gen-key.
 
 
 Handle multiple hostnames (multiple user IDs?) when generating host
    keys with gen-key.
 

+Work out the details (and describe a full use case) for assigning a
+   REVOKER during monkeysphere-server gen_key -- how is this set?  How
+   do we export it so it's available when a second-party revocation is
+   needed?
+
+Actually enable server hostkey publication.
+
+Streamline host key generation, publication, verification.  See
+   doc/george/host-key-publication for what dkg went through on
+   2008-06-19
+
+Streamline authorized_user_ids setup (including question of where
+   authorized_user_ids files should go).  See
+   doc/george/user-id-configuration for what dkg went through on
+   2008-06-19
+
+Ensure that authorized_user_ids are under as tight control as ssh
+   expects from authorized_keys: we don't want monkeysphere to be a
+   weak link in the filesystem.
+

 Make sure alternate ports are handled for known_hosts.
 
 Script to import private key into ssh agent.
 Make sure alternate ports are handled for known_hosts.
 
 Script to import private key into ssh agent.


@@ -54,16 +82,12 @@ File bug against ssh-keygen about how "-R" option removes comments
 File bug against ssh-keygen to see if we can get it to write to hash a
    known_hosts file to/from stdout/stdin.
 
 File bug against ssh-keygen to see if we can get it to write to hash a
    known_hosts file to/from stdout/stdin.
 

-Note all threat model reductions (with diagrams).
-

 Add environment variables sections to man pages.
 
 Environment variable scoping.
 
 Move environment variable precedence before conf file.
 
 Add environment variables sections to man pages.
 
 Environment variable scoping.
 
 Move environment variable precedence before conf file.
 

-Handle lockfiles when modifying known_hosts or authorized_keys.
-

 When using ssh-proxycommand, if only host keys found are expired or
    revoked, then output loud warning with prompt, or fail hard.
 
 When using ssh-proxycommand, if only host keys found are expired or
    revoked, then output loud warning with prompt, or fail hard.