On 12/04/2013 17:18, TvT wrote: > Why does google (and anybody else for that matter) did that if sha1 is > as bad as you point out?
Because a lot of their money is reserved to settle disputes when something goes wrong. They are taking a calculated risk. Why do you think companies like DocuSign need that much Venture Capital? Those who keep on using the old version of iText are also taking a risk. You should be aware of that when you promote the use of iText 2.1.7. ------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter _______________________________________________ iText-questions mailing list iText-questions@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/itext-questions iText(R) is a registered trademark of 1T3XT BVBA. Many questions posted to this list can (and will) be answered with a reference to the iText book: http://www.itextpdf.com/book/ Please check the keywords list before you ask for examples: http://itextpdf.com/themes/keywords.php