1 files changed, 2 insertions, 0 deletions
diff --git a/TODO b/TODO
index 8c37049..89f8cd9 100644
--- a/TODO
+++ b/TODO
@@ -2,6 +2,8 @@
   Do include it in the data that gets signed, so it can be recovered
   by trying each likely (recently seen) Activity as the prevMessage, and
   checking the signature.
+  (If doing this, might as well switch to SHA512, since hash size does not
+  matter.)
 * loadLog should verify the hashes (and signatures) in the log, and
   refuse to use logs that are not valid proofs of a session.
 * Encryption!