commit 89ad6c04dd0dc5174effd1f3534bf192479be739 Author: Jacob Appelbaum jacob@appelbaum.net Date: Thu Nov 7 17:24:06 2013 +0100

Add note about servers with weak DH group parameters --- TODO | 2 ++ 1 file changed, 2 insertions(+)

diff --git a/TODO b/TODO index ee8cf27..5d15d3c 100644 --- a/TODO +++ b/TODO @@ -38,6 +38,8 @@ Here is a nice list of things to do to improve tlsdate: 45) Drop root from tlsdated 47) Review cert validation and compare it with Chrome: https://code.google.com/p/chromium/codesearch#chrome/src/net/base/x509_certi... +48) Complain when server uses very weak DH group parameters + example weak server: https://demo.cmrg.net/

Patches welcome!