6 * subsection headers -> ask Krono
7 * black bars on the side -> ask Krono on how to avoid overfull boxes ?
8 * the code section portions include ligatures (search for "certificate" in code sections and see it). This can be improved. Ligatures make sense in normal text
11 Make sure that all config files links from the PDF work and that the examples are OK
20 Review paragraph about theory of operation
22 Commands are practical... keep them.
24 propose an openssl.cnf?
26 ejabberd - how to make proper ssl certificates
28 Add link to Peter Gutman's rant on why X509 is B\*-sh\*t
29 https://www.cs.auckland.ac.nz/~pgut001/pubs/crypto_wont_help.pdf
30 Engineering security book
34 # Practical settings section
37 How to test: this is nice to have everywhere but we should have some text describing a) the test explicitly and b) the expected outcome / output
41 The Exim section is quite advanced with specifying different modes. However, we did not do that in postfix etc,... so... in effect the different modes are confusing for readers because it does not follow the regular structure. So, how can we incorporate these advanced recommendations in a well known structure of the document?
42 ---> talk with Wolfgang about it