From 9d12c19d130994716ea27d770448c512e5c77573 Mon Sep 17 00:00:00 2001
From: Silvio Rhatto <rhatto@riseup.net>
Date: Sat, 23 May 2015 23:12:31 -0300
Subject: TODO update

---
 TODO.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/TODO.md b/TODO.md
index 8b31d2b..1b65721 100644
--- a/TODO.md
+++ b/TODO.md
@@ -43,6 +43,7 @@ Puppet modules
 
 ### Security
 
+- [DHE params deployment](https://weakdh.org/sysadmin.html).
 - badusb mitigations.
 - knock integration via https://github.com/juasiepo/knockd
 - apache:
@@ -126,6 +127,7 @@ Puppet modules
   - cleanup hidden `/.gem`.
   - use prompt.sh from bash-prompt as a submodule.
 - mail:
+  - use ssl::dhparams, move to 2048 bit and use the standard file names and paths.
   - schleuder: manage `/etc/schleuder/schleuder.conf`, using `superadminaddr: root` or other recipient, to avoid mails
     sent as `root@localhost`.
   - deploy https://git.autistici.org/ale/smtp-fp/tree/master
-- 
cgit v1.2.3