Update TODO after merge.

diff --git a/doc/TODO b/doc/TODO
index c17ef617d77636211ca9b7f69d2ce7d50906629a..3538fbf6a8c8831b31783cb48bc13304323f987a 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -3,10 +3,10 @@ Next-Steps Monkeysphere Projects:
 
 Detail advantages of monkeysphere: detail the race conditions in ssh,
    and how the monkeysphere can help you reduce these threat vectors:
 
 Detail advantages of monkeysphere: detail the race conditions in ssh,
    and how the monkeysphere can help you reduce these threat vectors:

-   threat model reduction diagrams 
+   threat model reduction diagrams.

 
 Determine how openssh handles multiple processes writing to
 
 Determine how openssh handles multiple processes writing to

-   known_hosts file (atomic appends?)
+   known_hosts/authorized_keys files (lockfile, atomic appends?)

 
 Handle unknown hosts in such a way that they're not always removed
    from known_hosts file.  Ask user to lsign the host key?
 
 Handle unknown hosts in such a way that they're not always removed
    from known_hosts file.  Ask user to lsign the host key?


@@ -61,16 +61,12 @@ File bug against ssh-keygen about how "-R" option removes comments
 File bug against ssh-keygen to see if we can get it to write to hash a
    known_hosts file to/from stdout/stdin.
 
 File bug against ssh-keygen to see if we can get it to write to hash a
    known_hosts file to/from stdout/stdin.
 

-Note all threat model reductions (with diagrams).
-

 Add environment variables sections to man pages.
 
 Environment variable scoping.
 
 Move environment variable precedence before conf file.
 
 Add environment variables sections to man pages.
 
 Environment variable scoping.
 
 Move environment variable precedence before conf file.
 

-Handle lockfiles when modifying known_hosts or authorized_keys.
-

 When using ssh-proxycommand, if only host keys found are expired or
    revoked, then output loud warning with prompt, or fail hard.
 
 When using ssh-proxycommand, if only host keys found are expired or
    revoked, then output loud warning with prompt, or fail hard.