diff --git a/doc/todo/sha1_collision_embedding_in_git-annex_keys.mdwn b/doc/todo/sha1_collision_embedding_in_git-annex_keys.mdwn
index 5e33c50097..2f345a088a 100644
--- a/doc/todo/sha1_collision_embedding_in_git-annex_keys.mdwn
+++ b/doc/todo/sha1_collision_embedding_in_git-annex_keys.mdwn
@@ -96,6 +96,9 @@ Or, we can document this gotcha.
 > > merge it into git-annex branch HEAD. It now looks as if insecure hashes
 > > were disabled earliest.
 
+> > > Well, annex.securehashesonly is implemented now. It currently needs to be
+> > > set in each clone that cares about it. --[[Joey]]
+
 ----
 
 A few other potential problems: