update TODO with remaining pre15 tasks

improve how it behaves when i remove a line from the approved-routers files

    - Rotate tls-level connections -- make new ones, expire old ones.

      Nick, can you remember why we wanted to do this?

on hup, retry_all_connections (plus binding? and closing i guess. hm.)

Legend:

SPEC!!  - Not specified

        D Deferred

        X Abandoned

For 0.0.2pre15:

        - don't pick exit nodes which will certainly reject all things.

        - don't pick nodes that the directory says are down

        - choose randomly from running dirservers, not just first one

For 0.0.2pre14:

        o More flexible exit policies (18.*, 18.0.0.0/8)

        o Work to succeed in the precense of exit policy violation

                o Choose the exit node _first_, then beginning, then

                  middle nodes.

Short-term:

        - choose randomly from running dirservers, not just first one

        - Make tls connections tls_close intentionally

        o Rename ACI to circID

        . integrate rep_ok functions, see what breaks

                        - Let user request first/last node

                        - And disallow certain nodes

                        D Choose path by jurisdiction, etc?

                . Make relay end cells have failure status and payload attached

                o Make relay end cells have failure status and payload attached

        X let non-approved routers handshake.

        - Dirserver shouldn't put you in running-routers list if you haven't

          uploaded a descriptor recently

Mid-term:

        - Are there anonymity issues with sequential streamIDs? Sequential

          circIDs? Eg an attacker can learn how many there have been.

          The fix is to initialize them randomly rather than at 1.

        - Look at having smallcells and largecells

        . Redo scheduler

                o fix SSL_read bug for buffered records

                o in descriptors

        o router posts descriptor

                o when it boots

                o every DirFetchPostPeriod seconds

                D when it changes

        o change tls stuff so certs don't get written to disk, or read from disk

        o make directory.c 'thread'safe