admit what we know about xml download

diff --git a/curl.c b/curl.c
index ce46ccb..9945288 100644 (file)
--- a/curl.c
+++ b/curl.c
@@ -64,6 +64,9 @@ X-Transcend-Version: 1
 </auth>
 
 
+The fh: is a sha1sum of the xml profile file. I haven't yet worked out
+the URL from which to downloaad that file, if the sha1sum doesn't
+match.
 
 Sometimes when we give it a good SecurID passcode, we get this...