- CSRF prevention
- option to only allow requests from localhost
- option to change the HTTP port
- typing notifications (mit padding-bottom)
- fake offline messages
- fake online status
- enter new name for contacts
- links in chat messages
- file transfer
- encrypt tox_save with password
- dont show notifications when browser is focused
- add sounds
- group chats (waiting for toxcore/gotox update)
- add support for toxme.io
- localization (www.transifex.com?)
- emoticons
- A/V?
- auto-updates / update-notification
- power consumption on mobile devices
- context menu (right click to contacts to remove etc)
- Etherpad-like persistent notes
- add missing back buttons (settings, welcome) on small screens
- display date in addition to time for chat messages
- Logout