diff --git a/app/notifications/sns_cert_validator.py b/app/notifications/sns_cert_validator.py
index 861927ea9..50edaeb90 100644
--- a/app/notifications/sns_cert_validator.py
+++ b/app/notifications/sns_cert_validator.py
@@ -112,6 +112,7 @@ def validate_sns_cert(sns_payload):
 
     signature = base64.b64decode(sns_payload["Signature"])
 
+    # TODO we can remove oscrypto and use calls from cryptography instead
     try:
         oscrypto.asymmetric.rsa_pkcs1v15_verify(
             oscrypto.asymmetric.load_certificate(certificate),