diff --git a/TODO b/TODO
index b9bf3125f..255f3349b 100644
--- a/TODO
+++ b/TODO
@@ -70,12 +70,6 @@ fix to use rpc?
 
 ** lib/krb5
 
-rewrite the lookup of KDCs to handle kerberos-<n> and not do any DNS
-requests if the information can be found locally.  this requires stop
-using krb5_get_krbhst.
-
-pay attention to priority and weight from SRV rr
-
 the replay cache is, in its current state, not very useful
 
 always generates a new subkey in an authenticator