> * PGP/GPG -- Any old keys still in use. (New keys do not use SHA1.) > * Distribution software checksum. SHA1 is the most common digest provided (even MD5 for

> * PGP/GPG -- Any old keys still in use. (New keys do not use SHA1.) > * Distribution software checksum. SHA1 is the most common digest provided (even MD5 for many). Software distribution seems to be the greatest threat (e.g. a Maven repository or Debian repository). It still seems like an enormous amount of work. You would have to go after a package with an old PGP key and then I guess go spoof a mirror (most of these guys already use SSL so that is a problem). There are probably easier and far more cost effective attack vectors.