diff --git a/krebs/5pkgs/krebspaste/default.nix b/krebs/5pkgs/krebspaste/default.nix
index 13920ad08..fb318af83 100644
--- a/krebs/5pkgs/krebspaste/default.nix
+++ b/krebs/5pkgs/krebspaste/default.nix
@@ -1,9 +1,7 @@
 { writeScriptBin, pkgs }:
 
-# TODO: add krebs CA to toolchain, remove --insecure
 # TODO: use `wrapProgram --add-flags` instead?
-
 writeScriptBin "krebspaste" ''
   #! /bin/sh
-  exec ${pkgs.bepasty-client-cli}/bin/bepasty-cli --insecure --url http://paste.retiolum "$@"
+  exec ${pkgs.bepasty-client-cli}/bin/bepasty-cli --url http://paste.retiolum "$@"
 ''