add TODO comment
diff --git a/include/picotls.h b/include/picotls.h
index f63b311..ae4f7b9 100644
--- a/include/picotls.h
+++ b/include/picotls.h
@@ -1153,8 +1153,9 @@
*/
ptls_cipher_suite_t *ptls_get_cipher(ptls_t *tls);
/**
- * returns current state of traffic keys. The cipher-suite being used, as well as the length of the traffic keys, can be obtained
+ * Returns current state of traffic keys. The cipher-suite being used, as well as the length of the traffic keys, can be obtained
* via `ptls_get_cipher`.
+ * TODO: Even in case of offloading just the TX side, there should be API for handling key updates, sending Close aleart.
*/
int ptls_get_traffic_keys(ptls_t *tls, int is_enc, uint8_t *key, uint8_t *iv, uint64_t *seq);
/**
