Contents of /trunk/TODO

Stack Smashing Protector (SSP)
==============================

If the enable this feature, an additional DLL
"libssp-0.dll" is required on Windows machines!


Tasks / Bugs / Items
====================

(priority: + high, * normal, - low)

    * change the file manager verify error message when an expired
      key has been used to sign a file.
    * set imported private keys automatically to "ultimate" ownertrust?
    * there is a problem with the +E hotkey in EURO countries.
    - migrate keyserver code to use the HTTP class.
      Implement proxy authentication into the HTTP class.
    - Implement a system to manage language files. Retrieve a list
      of available files from the server, present it to the user
      and allow to download the file and set the default language
      accoarding to the downloaded language file.
    * Offer an "update check" to inform user when a newer version
      of WinPT is available.
    * File register code needs an additional param "%1".
    + Handle the case that while WinPT tries to change GPG data,
      but before GPG is executed, an external event changed the
      keyring. So do not use BUG but issue an error.
    * implement property sheets at some places to improve usability.
    * Implement a mechanism to download and update language files.    
    * The key cache reload is much faster when no progress callback
      is used. Allow to disable the progress dialog.
    - Revamp the group database code. Use the GPG --group feature and make
    * CARD
        - sign/decrypt
        - factor out some common code into wptCardManager.cpp
    * Factor out some Managers into separate applications and provide
      a core library for common tasks.
    * Implement the non-swapable memory for passphrase handling.
      Implement "LockSetForegroundWindow".

Wishlist/todo for the GPGME package:
====================================

* Select the signing subkey.

* Allow to use --hidden-recipient.

* If the card is not inserted and for example gpgme_op_sign
  is called there is no real error.
  (IMHO: gpgme should care for 'CARDCTRL 5' and then return
   GPG_ERR_CARD_REMOVED)

* The current way to send large file through pipes is OK as
  long as the file is not too large. The limit is <100 MB.
  Otherwise the process would take too much time and propably
  the window/process freezes up.
  (fixed in gpgme 1.1.1)


Mobile Mode
===========

To allow to run WinPT from an USB stick without any dependencies,
we need to provide stubs for the registry access. This is done in
wptRegistryMobile.cpp. It must be assured that no system variable
or path will be used. For example that GPG uses an existing homedir
on the hard disk instead of the USB stick keyrings. 
1	Stack Smashing Protector (SSP)
2	==============================
3
4	If the enable this feature, an additional DLL
5	"libssp-0.dll" is required on Windows machines!
6
7
8	Tasks / Bugs / Items
9	====================
10
11	(priority: + high, * normal, - low)
12
13	* change the file manager verify error message when an expired
14	key has been used to sign a file.
15	* set imported private keys automatically to "ultimate" ownertrust?
16	* there is a problem with the +E hotkey in EURO countries.
17	- migrate keyserver code to use the HTTP class.
18	Implement proxy authentication into the HTTP class.
19	- Implement a system to manage language files. Retrieve a list
20	of available files from the server, present it to the user
21	and allow to download the file and set the default language
22	accoarding to the downloaded language file.
23	* Offer an "update check" to inform user when a newer version
24	of WinPT is available.
25	* File register code needs an additional param "%1".
26	+ Handle the case that while WinPT tries to change GPG data,
27	but before GPG is executed, an external event changed the
28	keyring. So do not use BUG but issue an error.
29	* implement property sheets at some places to improve usability.
30	* Implement a mechanism to download and update language files.
31	* The key cache reload is much faster when no progress callback
32	is used. Allow to disable the progress dialog.
33	- Revamp the group database code. Use the GPG --group feature and make
34	* CARD
35	- sign/decrypt
36	- factor out some common code into wptCardManager.cpp
37	* Factor out some Managers into separate applications and provide
38	a core library for common tasks.
39	* Implement the non-swapable memory for passphrase handling.
40	Implement "LockSetForegroundWindow".
41
42	Wishlist/todo for the GPGME package:
43	====================================
44
45	* Select the signing subkey.
46
47	* Allow to use --hidden-recipient.
48
49	* If the card is not inserted and for example gpgme_op_sign
50	is called there is no real error.
51	(IMHO: gpgme should care for 'CARDCTRL 5' and then return
52	GPG_ERR_CARD_REMOVED)
53
54	* The current way to send large file through pipes is OK as
55	long as the file is not too large. The limit is <100 MB.
56	Otherwise the process would take too much time and propably
57	the window/process freezes up.
58	(fixed in gpgme 1.1.1)
59
60
61	Mobile Mode
62	===========
63
64	To allow to run WinPT from an USB stick without any dependencies,
65	we need to provide stubs for the registry access. This is done in
66	wptRegistryMobile.cpp. It must be assured that no system variable
67	or path will be used. For example that GPG uses an existing homedir
68	on the hard disk instead of the USB stick keyrings.