[mckoss]

Computing a collision today costs about $100K from my reading of the paper. So most uses of SHA1 are protecting documents of far lower value, and would not be likely attack targets (today).

[baq]

if there are any important ssl certs signed with SHA-1, the race has just started.