commit - e295ec6647ca8312b2e0b12524129ab572e08135
commit + 85e8b713600158c7322d8e893c29fdc1fb7c6a64
blob - 3266d6461497a7550b7f12348423180c1ae08f3f
blob + 5b7431260946b2ba2391baec4d8e06fe7cb15612
--- TODO
+++ TODO
@@ -42,4 +42,7 @@ gotwebd:
   having to monitor interfaces for dynamic address changes.
 
 gotd:
-- needs to be designed and implemented
+- authentication should not rely on gotd.sock path permissions alone
+- fork+exec needs to occur per session, not just once at startup
+- chroot is unnecessary on OpenBSD and requires root
+  (for details: https://marc.gameoftrees.org/mail/1666525253.10787_0.html)