note about whether initiator cred lock is required

[moonshot.git] / moonshot / mech_eap / TODO

diff --git a/moonshot/mech_eap/TODO b/moonshot/mech_eap/TODO
index d622364..0111459 100644 (file)
--- a/moonshot/mech_eap/TODO
+++ b/moonshot/mech_eap/TODO
@@ -1,7 +1,6 @@
 - integration with initiator-side EAP channel bindings
-- integration with final supplicant architecture
-- test Heimdal port
-
-- fix ABNF: no slash in the case where there is no host
-- specify anonymous behaviour: use empty name
-
+- investigate initiator-side credential locking
+- always intern OIDs so they never need to be freed
+- handle many-to-many Shibboleth attribute mappings; need to encode both attribute and value index into more
+- add --with-xerces option
+- proper acquire_cred_ext implementation pending specification