diff --git a/security-info/xsa.html b/security-info/xsa.md
similarity index 56%
rename from security-info/xsa.html
rename to security-info/xsa.md
index 4958483a..3170e3c4 100644
--- a/security-info/xsa.html
+++ b/security-info/xsa.md
@@ -4,28 +4,24 @@ title: Xen Security Advisory (XSA) Tracker
permalink: /security/xsa/
---
-Xen Security Advisory (XSA) Tracker
+Xen Security Advisory (XSA) Tracker
+===================================
-
- Notice: This page is still under construction.
- Until this notice is removed, the information below may not be accurate.
- We appreciate your patience.
-
+**Notice:** This page is still under construction.
+Until this notice is removed, the information below may not be accurate.
+We appreciate your patience.
-
- This tracker shows whether Qubes OS is affected by any given Xen Security Advisory (XSA).
- Shortly after a new XSA is published, we will add a new row to this tracker.
- Whenever Qubes is significantly affected by an XSA, a Qubes Security Bulletin (QSB) is published, and a link to that QSB is added to the row for the associated XSA.
-
-
- Under the "Is Qubes Affected?" column, there are two possible values: Yes or No.
-
- - Yes means that the security of Qubes OS is affected.
- - No means that the security of Qubes OS is not affected.
-
- Note: For the purpose of this tracker, we do not classify mere denial-of-service (DoS) attacks as affecting the security of Qubes OS.
- Therefore, if an XSA pertains only to DoS attacks against Qubes, the value in this column will be No.
-
+This tracker shows whether Qubes OS is affected by any given [Xen Security Advisory (XSA)][XSA].
+Shortly after a new XSA is published, we will add a new row to this tracker.
+Whenever Qubes is significantly affected by an XSA, a [Qubes Security Bulletin (QSB)][QSB] is published, and a link to that QSB is added to the row for the associated XSA.
+
+Under the "Is Qubes Affected?" column, there are two possible values: **Yes** or **No**.
+
+ * **Yes** means that the *security* of Qubes OS *is* affected.
+ * **No** means that the *security* of Qubes OS is *not* affected.
+
+**Note:** For the purpose of this tracker, we do *not* classify mere [denial-of-service (DoS) attacks][DoS] as affecting the *security* of Qubes OS.
+ Therefore, if an XSA pertains *only* to DoS attacks against Qubes, the value in this column will be **No**.
@@ -73,3 +69,8 @@ permalink: /security/xsa/
{% endfor %}
+
+[XSA]: https://xenbits.xen.org/xsa/
+[QSB]: /security/bulletins/
+[DoS]: https://en.wikipedia.org/wiki/Denial-of-service_attack
+