> Because if a flaw is found in the SHA-1 algorithm, your > directory would be vulnerable to attack if you exposed > SHA-1 values. If a flaw is found in SHA-1 then the entire public-key world will fall apart. I fail to see the point of hashing something if the hash is perceived no more secure than the plaintext. The recommendation should be dropped. /r$