Update notes on API changes for weak crypto

1 files changed, 6 insertions, 1 deletions

diff --git a/TODO b/TODO
index 39631885..4b205e1e 100644
--- a/TODO
+++ b/TODO
@@ -193,7 +193,12 @@ Comments appear in the code prefixed by "ABI"
     creation of files with insecure crypto. Maybe
     QPDFWriter::allowWeakCrypto. Call this when --allow-weak-crypto is
     passed and probably also when copying encryption by default from
-    an input file.
+    an input file. There should be some API change so that, when
+    people recompile with qpdf 11, their code won't suddenly stop
+    working. Getting this right will take careful consideration of the
+    developer and user experience. We don't want to create a situation
+    where exactly the same code fails to work in 11 but worked on 10.
+    See #576 for latest notes.
   * Change deterministic id to use something other than MD5 but allow
     the old way for compatibility -- maybe rename the method to force
     the developer to make a choice