Check for public keys with less than 1023 bits and die if weak key is found

1 files changed, 0 insertions, 1 deletions

diff --git a/TODO b/TODO
index 6423855..ee82988 100644
--- a/TODO
+++ b/TODO
@@ -24,7 +24,6 @@ Here is a nice list of things to do to improve tlsdate:
 20)  Add verification of remote servers by DANE/CAA DNSSEC protected records
 21)  Integrate Chrome's CRL list into tlsdate
 22)  Block revoked or bad certs such as MD5 inc. and others.
-23)  Block weak keys (number of bits < 1024)
 24)  Add OCSP check option
 25)  Block weak signature algorithms
 26)  Hard code block list of known horrible certs (extract from Chrome/FF)