The problem with SHA-1 is that it is a U.S. Federal Information Processing Standard, and I don't trust that the U.S. government will not place export restrictions on it. I'm also wary of U.S. FIPS for the same reason I'm wary about DES - various spy agencies have to approve the standard, and one wonders if they know something we don't.
Thanks Bruce -- Bruce Perens K6BP [EMAIL PROTECTED] 510-215-3502 Finger [EMAIL PROTECTED] for PGP public key. PGP fingerprint = 88 6A 15 D0 65 D4 A3 A6 1F 89 6A 76 95 24 87 B3 -- TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to [EMAIL PROTECTED] . Trouble? e-mail to [EMAIL PROTECTED] .