Annotation of /trunk/TODO

Stack Smashing Protector (SSP)
==============================

If the enable this feature, an additional DLL
"libssp-0.dll" is required on Windows machines!


Tasks / Bugs / Items
====================

(priority: + high, * normal, - low)

    * change the file manager verify error message when an expired
      key has been used to sign a file.
    * set imported private keys automatically to "ultimate" ownertrust?
    * there is a problem with the +E hotkey in EURO countries.
    - migrate keyserver code to use the HTTP class.
      Implement proxy authentication into the HTTP class.
    - Implement a system to manage language files. Retrieve a list
      of available files from the server, present it to the user
      and allow to download the file and set the default language
      accoarding to the downloaded language file.
    * Offer an "update check" to inform user when a newer version
      of WinPT is available.
    * File register code needs an additional param "%1".
    + Handle the case that while WinPT tries to change GPG data,
      but before GPG is executed, an external event changed the
      keyring. So do not use BUG but issue an error.
    * implement property sheets at some places to improve usability.
    * Implement a mechanism to download and update language files.    
    * The key cache reload is much faster when no progress callback
      is used. Allow to disable the progress dialog.
    - Revamp the group database code. Use the GPG --group feature and make
    * CARD
        - sign/decrypt
        - factor out some common code into wptCardManager.cpp
    * Factor out some Managers into separate applications and provide
      a core library for common tasks.
    * Implement the non-swapable memory for passphrase handling.
      Implement "LockSetForegroundWindow".

Wishlist/todo for the GPGME package:
====================================

* Select the signing subkey.

* Allow to use --hidden-recipient.

* If the card is not inserted and for example gpgme_op_sign
  is called there is no real error.
  (IMHO: gpgme should care for 'CARDCTRL 5' and then return
   GPG_ERR_CARD_REMOVED)

* The current way to send large file through pipes is OK as
  long as the file is not too large. The limit is <100 MB.
  Otherwise the process would take too much time and propably
  the window/process freezes up.
  (fixed in gpgme 1.1.1)


Mobile Mode
===========

To allow to run WinPT from an USB stick without any dependencies,
we need to provide stubs for the registry access. This is done in
wptRegistryMobile.cpp. It must be assured that no system variable
or path will be used. For example that GPG uses an existing homedir
on the hard disk instead of the USB stick keyrings. 
1	twoaday	379	Stack Smashing Protector (SSP)
2			==============================
3
4			If the enable this feature, an additional DLL
5			"libssp-0.dll" is required on Windows machines!
6
7
8			Tasks / Bugs / Items
9			====================
10
11	twoaday	180	(priority: + high, * normal, - low)
12
13	twoaday	260	* change the file manager verify error message when an expired
14			key has been used to sign a file.
15	twoaday	273	* set imported private keys automatically to "ultimate" ownertrust?
16	twoaday	187	* there is a problem with the +E hotkey in EURO countries.
17	twoaday	219	- migrate keyserver code to use the HTTP class.
18	twoaday	187	Implement proxy authentication into the HTTP class.
19	twoaday	219	- Implement a system to manage language files. Retrieve a list
20	twoaday	184	of available files from the server, present it to the user
21			and allow to download the file and set the default language
22			accoarding to the downloaded language file.
23			* Offer an "update check" to inform user when a newer version
24			of WinPT is available.
25	twoaday	180	* File register code needs an additional param "%1".
26			+ Handle the case that while WinPT tries to change GPG data,
27			but before GPG is executed, an external event changed the
28			keyring. So do not use BUG but issue an error.
29			* implement property sheets at some places to improve usability.
30	twoaday	219	* Implement a mechanism to download and update language files.
31	twoaday	180	* The key cache reload is much faster when no progress callback
32			is used. Allow to disable the progress dialog.
33			- Revamp the group database code. Use the GPG --group feature and make
34			* CARD
35			- sign/decrypt
36			- factor out some common code into wptCardManager.cpp
37	twoaday	276	* Factor out some Managers into separate applications and provide
38			a core library for common tasks.
39	twoaday	180	* Implement the non-swapable memory for passphrase handling.
40	twoaday	276	Implement "LockSetForegroundWindow".
41	twoaday	216
42			Wishlist/todo for the GPGME package:
43			====================================
44
45			* Select the signing subkey.
46
47			* Allow to use --hidden-recipient.
48
49			* If the card is not inserted and for example gpgme_op_sign
50			is called there is no real error.
51			(IMHO: gpgme should care for 'CARDCTRL 5' and then return
52			GPG_ERR_CARD_REMOVED)
53
54			* The current way to send large file through pipes is OK as
55	twoaday	276	long as the file is not too large. The limit is <100 MB.
56	twoaday	216	Otherwise the process would take too much time and propably
57			the window/process freezes up.
58			(fixed in gpgme 1.1.1)
59	twoaday	270
60	twoaday	276
61	twoaday	270	Mobile Mode
62			===========
63
64			To allow to run WinPT from an USB stick without any dependencies,
65			we need to provide stubs for the registry access. This is done in
66			wptRegistryMobile.cpp. It must be assured that no system variable
67			or path will be used. For example that GPG uses an existing homedir
68			on the hard disk instead of the USB stick keyrings.