diff --git a/TODO b/TODO
index aa153b4..c862787 100644
--- a/TODO
+++ b/TODO
@@ -18,3 +18,19 @@ Tests needed:
     - looping domain-name (using compressed format)
     - compressed domain-name pointing into hyperspace
     - txt record with rdata filled with a list of empty byte-strings
+
+### Proxy
+
+#### Make CNAME NXDOMAIN refer to the target record, not the CNAME itself
+
+See also RFC 2308 section 2.1 and
+http://homepage.ntlworld.com./jonathan.deboynepollard/FGA/dns-response-taxonomy.html
+
+Basically, if the CNAME record is in the response, that's sufficient
+indication that the name of the CNAME exists! So NXDOMAIN clearly
+doesn't make sense to apply there.
+
+#### Should the cache replace SOAs by serial number?
+
+It probably shouldn't cache SOA records at all. Djbdns doesn't.
+("dnscache does not cache SOA records", from http://cr.yp.to/djbdns/dnscache.html)