diff --git a/F-Droid.-.md b/F-Droid.-.md
index 0092f43..6785cbc 100644
--- a/F-Droid.-.md
+++ b/F-Droid.-.md
@@ -2,9 +2,10 @@
 ## Bugs
  - [ ] channels listed in "Contacts"?
  - [ ] "Note to self" auto opening every time I toggle "Show offline" on and off?
+## Security
+ - [ ] Base config is insecurely configured to permit clear text traffic to all domains. Scope: ['*'] [Report](https://beta.pithus.org/report/93be6a83ced560e01f6c77b2e1291c8473ebe2ece0287b832e54bbefe108688b)
 ## Build
  - [ ] Get rid of "+free" suffix
- - [ ] Base config is insecurely configured to permit clear text traffic to all domains. Scope: ['*'] [Report](https://beta.pithus.org/report/93be6a83ced560e01f6c77b2e1291c8473ebe2ece0287b832e54bbefe108688b)
  - [ ] gradle/wrapper/gradle-wrapper.jar cannot be verified as free software because it does not match any listed on the official website: e2b82129ab64751fd40437007bd2f7f2afb3c6e41a9198e628650b22d5824a14
 There is a gradle command for upgrading the wrapper:
 ```