On Wed, May 11, 2011 at 8:32 AM, Bob Kerns <r...@acm.org> wrote:
> https://www.kb.cert.org/vuls/id/836068
> Nothing new should have been using MD5 for a looong time, and people need to
> know to stay away from it.
> Fake SSL certs that exploit this have been produced. It's not just a
> theoretical concern.

I know :) But as with most things, one shouldn't avoid it just because
one heard somewhere that it's 'weaker'. At least a bit of research
is needed, that's what my comment was meant to say. And the
MessageDigest class reference was not exactly relevant.

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to