diff --git a/src/resolve/resolved-dns-dnssec.c b/src/resolve/resolved-dns-dnssec.c
index d7d50c164c..ed126505ad 100644
--- a/src/resolve/resolved-dns-dnssec.c
+++ b/src/resolve/resolved-dns-dnssec.c
@@ -43,6 +43,8 @@
  *   - multi-label zone compatibility
  *   - DNSSEC cname/dname compatibility
  *   - per-interface DNSSEC setting
+ *   - retry on failed validation
+ *   - fix TTL for cache entries to match RRSIG TTL
  *   - DSA support
  *   - EC support?
  *