-----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 The biggest problem about it is that most of the root CAs use SHA-1. As it's possible for a well funded organization to generate collisions, it makes MITM possible. This is a big problem, as we depend a lot on TLS.
- -- Jonathan -----BEGIN PGP SIGNATURE----- iQIcBAEBAwAGBQJJ/C4YAAoJEMtRg9d5cXHk7XgP/0xBP36sTHORzbkWiwhmygVj wUzW+weNr+TdexqOI/SBuOiQF12YD8EF4n5aU6QCw4OL24+3c/Oo+FHJ5bKMTMye CFX2SL2kp0QkC/42QmyrBiBqhY+wMZC69BKw23qAUmSiYsKUSj79j0ZP8AZSz4ho QKKZ9goC9U/c812cIQnu81sa7XvoPRbBk30kWWIzUaW3U1wxEk7n2PHrq/QHa0/r pPTJHIVH76JWOpekiO00step3GoTbvdPYkhdADdIuMzDN5GF4OkjsGd0aFVtZNJo nwcWSc+g/dDLQ5nVn6BzPnlIqBZTBSWpbdIcX3KrXumGP0Hyoi6nxZJcB1Vdwo2v WGcWoyewC12H5F75bND3ZHIFiGTrqxLrUJJjOvkww56yEz9Zhh/zmjfb14vp9o5j 0vx+7pPfxRajoh3Pjrj7wuOteIuBpenjPWTlPHFGqJYwfNXAa1f7C3iNkrVl3Rdy esCrF+2UsPO6Ntv/JL5m1jS6xBCaEBqKl/MM8SGiKZJKjR87aSUZpdYeSKgRDZHL Um9Nbao8gSDT5rGzIBQ5DGZK+M00ZhygV9J04EHOxvdq5JMaLpHQH7G+X3ZKl/4R 7gIqy9FT0POFFfTw1V9wExBp8vn28wotwLCNDNjRbsKj5hcDIfrFCpEgSha502DL 4hJiw4cG8lkhKQz35K4s =236c -----END PGP SIGNATURE-----
