diff --git a/TODO b/TODO
index fdf58eb4..0b86432b 100644
--- a/TODO
+++ b/TODO
@@ -1,4 +1,4 @@
-* Add single UDP port
+* Use a single UDP port
 * Add a simple username/password back-end
 * Certificate authentication to the main process (can it be done without
   moving the TLS handshake over the main thread?)
@@ -6,3 +6,5 @@
   for operations (this will make the privileged process a bottleneck).
 * Handle multiple clients in a single tun device (check if needed at all)
 * Add path MTU discovery
+* Allow the usage of PSK ciphersuites instead of the non-standard cisco 
+  resumption mode for DTLS.