diff --git a/doc/todo/credentials-less_access_to_s3/comment_2_cefe0fbf1c3c6037c677ec6cff0aa6d6._comment b/doc/todo/credentials-less_access_to_s3/comment_2_cefe0fbf1c3c6037c677ec6cff0aa6d6._comment
new file mode 100644
index 0000000000..4455a4fe42
--- /dev/null
+++ b/doc/todo/credentials-less_access_to_s3/comment_2_cefe0fbf1c3c6037c677ec6cff0aa6d6._comment
@@ -0,0 +1,9 @@
+[[!comment format=mdwn
+ username="https://id.koumbit.net/anarcat"
+ subject="autodetection?"
+ date="2015-06-02T18:11:15Z"
+ content="""
+couldn't the remote fallback to readonly mode when no credentials are available?
+
+also, it seems to me that once you have the bucket name, you can automatically guess the URL (http://$bucket.s3.amazon.com or whatever)...
+"""]]