$Id: TODO 116 2004-03-25 09:21:24Z joostvb $

Legend:
        - Not done
        * Top priority
        . Partially done
        o Done
        D Deferred
        X Abandoned

  - Get rid of cvs2cl in Makefile.am and bootstrap, now that we've moved
    from CVS to Subversion.  Find out about alternatives.
                                            JvB, 2004-03-25

  - Support --help and --version on all commands.  Don't pretend
    everything given to ca-createsendout is a keyid.
  - Do away with outdated Revision variables, instead have a global
    version number.
  - Write signing log for each signed UID/Key
  - have a general log
  - fail nicer if a challenge was answered twice
  - put downloading and uploading of keys in the background,
    or at least batch (#239801)
  - make it useable without additional system account
    (like use your own GNUPGHOME et al)
  - support more than one personal key
  - move getkeydir to shared Cabot.pm
    ca-recv and ca-dosign share a send_mail sub.  Shouldn't
    that get moved to Cabot.pm?  Or should we use a Mail module
    from CPAN?
                                           JvB, 2003-07-25
  - finish cabot-specific installation and setup instructions in
    README, after having done complete testing.
                                           JvB, 2003-07-25
  - ca-recv should give sane exit codes, to be suitable for
    calling from .forward : MTA should decide wether error was
    temporarily or fatal.
                                           JvB, 2003-07-26
  - move texts out of ca-sendout.
  - only send signed key to one address
  - only send new signatures, not the entire key
  o ca-dosign doesn't really clearly indicate an error in the MAGIC
    verification.  When all id's have failed to match the MAGIC,
    gpg asks: "Really sign all user IDs?".
    (I don't think that's an issue because we always have at least
     one matching UID, if the high-ascii bug is resovled -PP)
  o BUG: Keys with high-bit ascii stuff in the id's comment make
    the MAGIC verification fail.  High-bit stuff is replaced by
    '_'.
  o check if key/uid is already signed
  o UID selection is broken when a key has revoked uids in dosign
  o UIDs with special chars don't get selected in dosign
  X optionally sign all keys in batch mode using command-fd
    Abandoned: use some agent stuff instead
