commit - 90d8536c17a38f6a8857e50bc6841c21d35bb022
commit + a3f334437c3608015c16d7a39163232e59ea514f
blob - 3266d6461497a7550b7f12348423180c1ae08f3f
blob + 5b7431260946b2ba2391baec4d8e06fe7cb15612
--- TODO
+++ TODO
@@ -42,4 +42,7 @@ gotwebd:
   having to monitor interfaces for dynamic address changes.
 
 gotd:
-- needs to be designed and implemented
+- authentication should not rely on gotd.sock path permissions alone
+- fork+exec needs to occur per session, not just once at startup
+- chroot is unnecessary on OpenBSD and requires root
+  (for details: https://marc.gameoftrees.org/mail/1666525253.10787_0.html)