diff --git a/TODO b/TODO
index 0716f2bd9..efe032adc 100644
--- a/TODO
+++ b/TODO
@@ -87,4 +87,7 @@ some simple way of handling the w2k situtation
 
 crypto: allow scather/gather creation of checksums
 
+verify_user: handle non-secure verification failing because of
+host->realm mapping
+
 ** lib/roken