Noted a couple of important issues

README.md

@@ -15,6 +15,14 @@ This project is currently at the proof-of-concept stage. Current production Psip
 
 ### TODO (proof-of-concept)
 
+* pendingConns lifecycle issue: MeekConn's dialer uses the establishTunnel pendingConns, which means there's
+  a chance that the asynchronous pendingConns.Interrupt() by establishTunnel will close a meek HTTPS conn. Also,
+  MeekConn is holding a reference to this pendingConns long after establishTunnel finishes.
+  fix: MeekConn should keep its own PendingConns for underlying HTTPS connections; MeekConn should go into the
+  establish pendingConns and when it closes, it should in turn close its own pendingConns.
+  ...And the same for serverApi.
+* ResponseHeaderTimeout is not sufficient to detect dead tunneled web requests
+  fix: use DirectDialer with all timeouts set, use dedicated pendingConns (see above)
 * prefilter entries by capability; don't log "server does not have sufficient capabilities"
 * log noise: "use of closed network connection"
 * log noise(?): 'Unsolicited response received on idle HTTP channel starting with "H"'