diff --git a/TODO b/TODO
index c55cf1d9dc29b193063c8f432bc6fa4fbb484e0f..e863e4710101db178cc1e30d39352a6f7e9fee84 100644
--- a/TODO
+++ b/TODO
@@ -46,6 +46,12 @@ These are show-stoppers that prevent a new release.
 
 * Protocol-A.texi contains both INT32 and INTEGER. (3228850)
 
+* Protocol-A.texi uses mailbox and letterbox interchangeably.  Use one
+  term only, or at least state explicitly that they are the same thing.
+
+* 89=create-person should probably not do an automatic login.  (Wasn't
+  this discussed in KOM?)
+
 * String-Size is used but not defined in Protocol-A.texi. (3228850)
 
 * Session-No is defined twice in Protocol-A.texi. (3228850)
@@ -64,6 +70,20 @@ These are show-stoppers that prevent a new release.
 
 * Check that this file is included in the distribution.
 
+* The protocol revision section of Protocol-A.info is incomplete.
+
+* ceder thinks that the sender of a BCC recipient group should be
+  allowed to see it, so that the sender can see when the recipient has
+  read the text.
+
+* ceder thinks that a BCC recipient group should be visible to anybody
+  that may become a member of the BCC recipient (as opposed to all
+  members and all administrators), lest everybody starts to be passive
+  members of every conference just to be able to see BCC recipients.
+
+* The redirect aux-info needs more documentation.  See FIXME comment
+  in Protocol-A.texi.
+
 As soon as possible
 ===================
 
@@ -77,6 +97,12 @@ High priority, but they can wait until after the next release.
 
 * Add a checksum on each object in the database.
 
+* The text-mass file should contain some redundancy.  At a minimum, it
+  should store the text number and text length of each text, so that
+  there is absolutely no risk that the wrong text is displayed.  (That
+  has acutally happened more than once due to faulty hardware or
+  operating systems--we should do better.)
+
 * Add an improved internal structure for the text_stat list to avoid a
   large fixed-size array.