diff --git a/actions/auth-pubtkt b/actions/auth-pubtkt
index 0c148d6c7..379cfe2b3 100755
--- a/actions/auth-pubtkt
+++ b/actions/auth-pubtkt
@@ -66,6 +66,7 @@ def subcommand_create_key_pair(_):
             for key_file in [public_key_file, private_key_file]
     ]):
         pkey = crypto.PKey()
+        # XXX: Use RSA when available in mod-auth-pubtkt.
         pkey.generate_key(crypto.TYPE_DSA, 1024)
 
         with open(private_key_file, 'w') as priv_key_file:
@@ -101,6 +102,7 @@ def create_ticket(pkey, uid, validuntil, ip=None, tokens=None,
 
 def sign(pkey, data):
     """Calculates and returns ticket's signature."""
+    # XXX: Use SHA256 when available in mod-auth-pubtkt.
     sig = crypto.sign(pkey, data, 'sha1')
     return base64.b64encode(sig).decode()