diff --git a/TODO.markdown b/TODO.markdown
index 036df97..a80894f 100644
--- a/TODO.markdown
+++ b/TODO.markdown
@@ -132,6 +132,9 @@ Bugs to fix and features to add for 5.0
   `authorized_keys` (e.g. a users public key) or to just add the Dom0's
   `/root/.ssh/authorized_keys` as the DomU's one.
 
+* Generate ECDSA host keys where possible. (Likely depends on the
+  to-be-installed SSH version.)
+
 * More generic roles
 
   Deploy a web server or setup ssmtp directly via flag when setting up