Slashdot has a REALLY interesting article about SHA-1.
It appears that SHA-1 is broken as Bruce Schneier says in his weblog
[url]http://www.schneier.com/blog/archives/2005/02/sha1_broken.html[/url]
I work in the PKI market for about 5 years. As you can understand if SHA-1 is broken means a lot to me, you and the world.