- Offer list of clients at server root - Parameter for server URL - Parameter for static file serve path - Parameter for sererv name - Set up tokens or privkeys or tripcodes or something so clients can't trivially impersonate servers - Prevent directory traversal attacks - Fix possible timing gap when refreshing http_listen (Just have client wait a few seconds?) - Error handling