On Wed, May 11, 2011 at 8:32 AM, Bob Kerns <[email protected]> wrote:
> https://www.kb.cert.org/vuls/id/836068
> Nothing new should have been using MD5 for a looong time, and people need to
> know to stay away from it.
> Fake SSL certs that exploit this have been produced. It's not just a
> theoretical concern.

I know :) But as with most things, one shouldn't avoid it just because
one heard somewhere that it's 'weaker'. At least a bit of research
is needed, that's what my comment was meant to say. And the
MessageDigest class reference was not exactly relevant.

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to