diff --git a/todo.mdwn b/todo.mdwn
index d0c9464d2515ae68df79a01b00f274b05d92c221..7a2c5838dcfbc58e483a519aaec414e6d6356118 100644
--- a/todo.mdwn
+++ b/todo.mdwn
@@ -30,7 +30,14 @@ We should probably try one of those solutions.
   * this works now?
 
 * k.copyleft.org never sends email to anyone for anything.  It should do that
-  at least for authentication.
+at least for authentication.
+
+* SSL setup on lists.copyleft.org has problem that is somewhat undiagnoised.
+
+[an SSL Labs report](https://www.ssllabs.com/ssltest/analyze.html?d=lists.copyleft.org&s=23.253.43.166)
+compared to the
+[SSL Labs report for lists.sfconservancy.org](https://www.ssllabs.com/ssltest/analyze.html?d=lists.sfconservancy.org&s=162.242.171.33)
+is interesting here.
 
 * [Main archive pages are broke, CSS/menu wise](http://lists.copyleft.org/pipermail/discuss/).