Add:

> * Add 'hostgss' pg_hba.conf option to allow GSS link-level encryption
>
>   http://archives.postgresql.org/pgsql-hackers/2008-07/msg01454.php

diff --git a/doc/TODO b/doc/TODO
index 5b795383c69ed6b02d17b66080ca2872fc2ee9e5..258c3ba45f48c30e792cc7ec6ef72f469c0077ad 100644 (file)
--- a/doc/TODO
+++ b/doc/TODO
@@ -1,7 +1,7 @@
 PostgreSQL TODO List
 ====================
 Current maintainer:    Bruce Momjian ([email protected])
-Last updated:      Thu Jul 31 16:47:21 EDT 2008
+Last updated:      Mon Aug 11 23:48:39 EDT 2008
 
 The most recent version of this document can be viewed at
 http://www.postgresql.org/docs/faqs.TODO.html.
@@ -82,13 +82,17 @@ Administration
 
   http://archives.postgresql.org/pgsql-bugs/2007-12/msg00069.php
 
-* Allow client certificate names to be checked against the client
+* Allow SSL client certificate names to be checked against the client
   hostname
 
   This is already implemented in
   libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code
   is commented out.
 
+* Add 'hostgss' pg_hba.conf option to allow GSS link-level encryption
+
+  http://archives.postgresql.org/pgsql-hackers/2008-07/msg01454.php
+
 * Improve server security options
 
   http://archives.postgresql.org/pgsql-hackers/2008-04/msg01875.php

diff --git a/doc/src/FAQ/TODO.html b/doc/src/FAQ/TODO.html
index 008a5e69499d013648bd4c57bdf3011ae2e0ebf9..5d0f4a50a3b613500c8396cefed67e73e4f9b121 100644 (file)
--- a/doc/src/FAQ/TODO.html
+++ b/doc/src/FAQ/TODO.html
@@ -8,7 +8,7 @@
 
 PostgreSQL TODO List
 Current maintainer:     Bruce Momjian ([email protected])
-Last updated:           Thu Jul 31 16:47:21 EDT 2008
+Last updated:           Mon Aug 11 23:48:39 EDT 2008
 
 The most recent version of this document can be viewed at
 http://www.postgresql.org/docs/faqs.TODO.html.
@@ -79,11 +79,14 @@ first.  There is also a developer's wiki at
   sharing SSL keys with other applications
   http://archives.postgresql.org/pgsql-bugs/2007-12/msg00069.php
 
-  Allow client certificate names to be checked against the client
+  Allow SSL client certificate names to be checked against the client
   hostname
   This is already implemented in
   libpq/fe-secure.c::verify_peer_name_matches_certificate() but the code
   is commented out.
+
+  Add 'hostgss' pg_hba.conf option to allow GSS link-level encryption
+  http://archives.postgresql.org/pgsql-hackers/2008-07/msg01454.php
 
   Improve server security options
   http://archives.postgresql.org/pgsql-hackers/2008-04/msg01875.php