diff --git a/TODO b/TODO
index d2a638d7..55116f0f 100644
--- a/TODO
+++ b/TODO
@@ -4,13 +4,18 @@
 
 * ostree-commit: multithreaded/async (basically compute sha256 in parallel)
 
-* GPG signatures on commits
+* GPG signatures on commits, and more generally, extensible metadata
+  associatible with commits.  So for example, commit objects could
+  also contain secondary checksums of the *entire* content, which
+  would allow for stronger verification.
 
 * Investigate pack files and HTTP range requests
 
-* Tests of corrupted repositories, more error conditions
+* Efficient delta format between commit objects, somewhat like
+  Chromium autoupdate: set of operations to perform given previous
+  object set to create new objects.
 
-* Improve GRUB management: Assocate kernels with their deployments
+* Tests of corrupted repositories, more error conditions
 
 * ostree admin install: Pull in host data, such as uids and /etc/fstab