TODO update

diff --git a/TODO.md b/TODO.md
index 8b31d2b38c78362cdc6657e36c5da49409c91ad1..1b6572127e96daeb3cf56195c7acd0d002efc053 100644 (file)
--- a/TODO.md
+++ b/TODO.md
@@ -43,6 +43,7 @@ Puppet modules
 
 ### Security
 
+- [DHE params deployment](https://weakdh.org/sysadmin.html).
 - badusb mitigations.
 - knock integration via https://github.com/juasiepo/knockd
 - apache:
@@ -126,6 +127,7 @@ Puppet modules
   - cleanup hidden `/.gem`.
   - use prompt.sh from bash-prompt as a submodule.
 - mail:
+  - use ssl::dhparams, move to 2048 bit and use the standard file names and paths.
   - schleuder: manage `/etc/schleuder/schleuder.conf`, using `superadminaddr: root` or other recipient, to avoid mails
     sent as `root@localhost`.
   - deploy https://git.autistici.org/ale/smtp-fp/tree/master