diff --git a/doc/TODO b/doc/TODO
index ddd47c7df..ef5f0b3d8 100644
--- a/doc/TODO
+++ b/doc/TODO
@@ -1,5 +1,4 @@
 TODO items.
-o in production mode, do not free memory on exit. In debug mode, test leaks.
 o #define BIT_... different on bigendian and smallendian systems so that
   the htons on flags is not needed to send a message from the cache.
 o speed up pkt domain name decompression loop detection using counter perhaps.
@@ -20,8 +19,6 @@ o (option) to not send replies to clients after a timeout of (say 5 secs) has
 o private TTL feature
 o pretend-dnssec-unaware, and pretend-edns-unaware modes for debug/workshops.
 o delegpt use rbtree for ns-list, to avoid slowdown for very large NS sets.
-o be able to have different listen and query-to addresses to bind to,
-  so you can listen to localhost and query-to to the internet.
 o reprime and refresh oft used data before timeout.
 o retain prime results in a overlaid roothints file.
 o store primed key data in a overlaid keyhints file (sort of like drafttimers).
@@ -29,7 +26,8 @@ o windows version, auto update feature, a query to check for the version.
 o autoreport of problems
 o command the server with TSIG inband. get-config, clearcache, 
 	get stats, get memstats, get ..., reload, clear one zone from cache
-o watch for spoof nearmisses.
+o watch for spoof nearmisses. Keep counter of nearmisses and print that
+  in the stats lines, operator can determine what level is a redalert.
 o improve compression of DNS packets by first puttig uncompressible rrs, then
   compress to their rdata.
 o NSID rfc 5001 support.