1 files changed, 2 insertions, 1 deletions
diff --git a/TODO b/TODO
index 24f9f35..bfe4e07 100644
--- a/TODO
+++ b/TODO
@@ -1,4 +1,5 @@
-* Add timings, so logs can be replayed.
+* loadLog should verify the hashes (and signatures) in the log, and
+  refuse to use logs that are not valid proofs of a session.
 * potential DOS where developer sends Activity Entered that all
   refer back to the first Activity Seen. This requires the user
   side to keep a Backlog containing all later Activity Seen, so uses