Merge commit 'jrollins/master'

[monkeysphere.git] / doc / TODO

diff --git a/doc/TODO b/doc/TODO
index e50da4dd1de55be70ec231905cb238b4fc2469a6..6006d628b5820b4a5681800380fd25c0c25d3b75 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -9,9 +9,6 @@ Handle unverified monkeysphere hosts in such a way that they're not
    always removed from known_hosts file.  Ask user to lsign the host
    key?
 
-Handle multiple hostnames (multiple user IDs?) when generating host
-   keys with gen-key.
-
 Work out the details (and describe a full use case) for assigning a
    REVOKER during monkeysphere-server gen_key -- how is this set?  How
    do we export it so it's available when a second-party revocation is
@@ -41,8 +38,10 @@ Provide a friendly interactive UI for marginal or failing client-side
 
 Make sure onak properly escapes user IDs with colons in them.
 
-Build a decent, presentable web site for documentation, evangelism,
-   etc.  Include a mention of how to report trouble or concerns.
+Indicate on web site how to report trouble or concerns, and how to
+   join the project.
+
+Clean up the style for the web site (pages, icons, etc).
 
 Create ssh2openpgp or convert to full-fledged keytrans.
 
@@ -78,28 +77,15 @@ File bug against ssh-keygen about how "-R" option removes comments
 File bug against ssh-keygen to see if we can get it to write to hash a
    known_hosts file to/from stdout/stdin.
 
-Add environment variables sections to man pages.
-
-Environment variable scoping.
-
-Move environment variable precedence before conf file.
-
 When using ssh-proxycommand, if only host keys found are expired or
    revoked, then output loud warning with prompt, or fail hard.
 
-Update monkeysphere-ssh-proxycommand man page with new keyserver
-   checking policy info.
-
 File bug against seahorse about how, when creating new primary keys,
    it presents option for "RSA (sign only)" but then creates an "esca"
    key.
 
 File bug against enigmail about lack of ability to create subkeys.
 
-Privilege separation: monkeysphere user to handle authn keyring and
-   generate authorized_keys file (which would be moved into place by
-   root).  Host keyring would be owned by root.
-
 Test and document what happens when any filesystem that the
    monkeysphere-server relies on and modifies (/tmp, /etc, and /var?)
    fills up.
@@ -107,3 +93,14 @@ Test and document what happens when any filesystem that the
 Optimize keyserver access, particularly on monkeysphere-server
    update-users -- is there a way to query the keyserver all in a
    chunk?
+
+Create DSA authentication subkey for server during gen-key
+
+Fix behavior when add-identity-certifier fails to fetch a key from the
+   keyserver.
+
+Allow server administrators to add-identity-certifier from a key in
+   the filesystem (or on stdin, etc)
+
+Add "monkeysphere-server diagnostics" subcommand to identify missing
+   pieces of monkeysphere server administration setup.