diff --git a/TODO-1.0 b/TODO-1.0
new file mode 100644
index 000000000..ade5a7963
--- /dev/null
+++ b/TODO-1.0
@@ -0,0 +1,12 @@
+- sort out hprop:ing
+- figure out hostname case sensitive issues
+- verify_user: handle non-secure verification failing because of
+  host->realm mapping
+- gssapi rc4 mechanism
+- PAM?
+- kadmin: make it happy with reading and parsing kdc.conf
+- handle readline hiding in readline/readline.h
+- berkeley db circus
+- v4->v5 conversion in kdc
+
+include TODO-shadow
diff --git a/TODO-shadow b/TODO-shadow
new file mode 100644
index 000000000..313438d1a
--- /dev/null
+++ b/TODO-shadow
@@ -0,0 +1,6 @@
+-krb5_fwd_tgt_creds() is still broken
+-the 4 to 5 principal thing
+-gss_acquire_cred still doesn't allow an alternate keytab
+-and the db lib versus headers thing
+
+/afs/andrew.cmu.edu/usr/shadow/ka2heim.txt