diff --git a/TODO.markdown b/TODO.markdown
index ca78be96..009c2265 100644
--- a/TODO.markdown
+++ b/TODO.markdown
@@ -13,18 +13,15 @@ things that need to be fixed.
 * SaltLength in NSEC3 is ugly to set, should be automatically done. There are prolly a few more
     settings just like that -- need to look at them.
     -edns NSID is another
+* Add tsig check in 'q'?
 
 ## BUGS
 
 * Not completely sure wildcard handling when verifying is correct;
-* Timeouts - they may be set way too short.
+% ./q -short -check -dnssec goed.nl @ns1.nic.nl
+no wildcard, but is ok
 
 ## Examples to add
 
 * Nameserver, with a small zone, 1 KSK and online signing;
 * Recursor - ala FunkenSturm?
-
-### NSEC3 checks
-
-% ./q -short -check -dnssec goed.nl @ns1.nic.nl
-no wildcard, but is ok