X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;ds=sidebyside;f=doc%2FTODO;h=e1e90f0ec84994a02ff060e4fe81250f6ec43a43;hb=91bf57bac7bed32937c13595044158007e7b5812;hp=a82f031dd96dbe61048e638cf875a856e1125eca;hpb=ad83c56cbab054c36ec854bf9cc2e0be530fce72;p=monkeysphere.git diff --git a/doc/TODO b/doc/TODO index a82f031..e1e90f0 100644 --- a/doc/TODO +++ b/doc/TODO @@ -107,3 +107,29 @@ Update monkeysphere-ssh-proxycommand man page with new keyserver Update monkeysphere-ssh-proxycommand man page with info about no-connect option. + +File bug against seahorse about how, when creating new primary keys, + it presents option for "RSA (sign only)" but then creates an "esca" + key. + +File bug against enigmail about lack of ability to create subkeys. + +Privilege separation: monkeysphere user to handle authn keyring and + generate authorized_keys file (which would be moved into place by + root). Host keyring would be owned by root. + +Check permissions of authorized_user_ids file to be writable only by + user and root (same as authorized_keys) + +Improve function that sets owner trust for keys in server keychain. + +Test and document what happens when any filesystem that the + monkeysphere-server relies on and modifies (/tmp, /etc, and /var?) + fills up. + +Consider moving monkeysphere-managed files (gpg homedirs? temporary + files?) into /var. + +Optimize keyserver access, particularly on monkeysphere-server + update-users -- is there a way to query the keyserver all in a + chunk?