diff --git a/TODO b/TODO
index e9c67e3f..b767c97c 100644
--- a/TODO
+++ b/TODO
@@ -8,7 +8,7 @@
   forward the UDP connection to the proper worker).
 
 * Try adding salsa20-12 and UMAC as encryption algorithms for DTLS to reduce 
-  CPU load.
+  CPU load in systems without AES accelerator.
 
 * Handle users being in multiple groups.
 
@@ -32,3 +32,6 @@
 
 * When a TUN device is in use and cannot be assigned mark it as such and
   continue.
+
+* When a user (IP) gets into the BAN list multiple times, disable it for
+  long.