X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=doc%2FTODO;h=bf51ae0c8cdba2b40f09464e6ea68ce41d6c38f5;hb=8a977a8371f2ea54e3888494e1b474befeba318b;hp=6125fea3aa4deae2a52f17c10d59a1e2b3a12d4f;hpb=a7275bfcb21bccff64ccc544676406cb6318a021;p=monkeysphere.git diff --git a/doc/TODO b/doc/TODO index 6125fea..bf51ae0 100644 --- a/doc/TODO +++ b/doc/TODO @@ -1,6 +1,25 @@ Next-Steps Monkeysphere Projects: --------------------------------- +Detail advantages of monkeysphere: detail the race conditions in ssh, + and how the monkeysphere can help you reduce these threat vectors: + threat model reduction diagrams + +Determine how openssh handles multiple processes writing to + known_hosts file (atomic appends?) + +Handle unknown hosts in such a way that they're not always removed + from known_hosts file. Ask user to lsign the host key? + +Handle multiple multiple hostnames (multiple user IDs?) when + generating host keys with gen-key. + +Make sure alternate ports are handled for known_hosts. + +Add environment variables sections to man pages. + +Script to import private key into ssh agent. + Provide a friendly interactive UI for marginal or failing client-side hostkey verifications. Handle the common cases smoothly, and provide good debugging info for the unusual cases.