On: Lifetimes of cryptographic hash functions

[pvg]

But isn't the real lesson here that X.509 is flawed

I don't think that's the case

And there are signatures that are provably resistant to collisions, shouldn't we move to such signatures?

It's just much simpler to move to a better hash function.

[bjornsing → pvg]

> It's just much simpler to move to a better hash function.

I don't see how one excludes the other. :P