--- a/TODO	Thu Aug 12 14:56:22 2004 +0000
+++ b/TODO	Thu Aug 12 15:41:36 2004 +0000
@@ -1,28 +1,24 @@
 Current:
 
-Things which need doing:
+Things which might need doing:
 
 - Make options.h generated from configure perhaps?
 
-- investigate self-pipe?
+- Improved queueing of unauthed connections
+
 - fix agent fwd problems
+
 - improve channel window adjustment algorithm (circular buffering)
 
-- Don't use pregenerated AES tables
-
-- check PRNG
 - check that there aren't timing issues with valid/invalid user authentication
   feedback.
 
-- IP6 (binding to :: takes over ipv4 as well, sigh. If anyone wants to suggest
-  a clean way (ie no V4MAPPED or setsockopt things) please let me know :)
-- Binding to different interfaces (see ipv6 probably)
+- Binding to different interfaces
 
-- PAM ??
-- inetd
 - possible RSA blinding? need to check whether this is vuln to timing attacks
+- check PRNG
 - CTR mode, SSH_MSG_IGNORE sending to improve CBC security
-- DH Group Exchange possibly
+- DH Group Exchange possibly, or just add group14 (whatever it's called today)
 
 - Use m_burn for clearing sensitive items in LTM/LTC