
MD5 Is Broken: A Memo to the Server Admin, and Should You Publish the Code That Broke It?
A fictional server still signs certificates with MD5, a hash broken since 2008. A memo to the admin, and the question it raises: should researchers be free to publish code that breaks an algorithm?