ahhh. Was mixing pre-image attacks with collision attacks in MD5. so ignore that. If its not over HTTPS, it doesn't matter there are 3 hashes. I change the doc

ahhh. Was mixing pre-image attacks with collision attacks in MD5. so ignore that. If its not over HTTPS, it doesn't matter there are 3 hashes. I change the doc. I generate the 3 hashes for my changed doc. I can serve those new hash values.