Wow, so it doesn't just come down to using md5, but not using md5-hmac (which is still secure to this day). I only skimmed the paper so maybe i misunderstand, b

Wow, so it doesn't just come down to using md5, but not using md5-hmac (which is still secure to this day). I only skimmed the paper so maybe i misunderstand, but that would have been considered bad practise even back in the 90s when md5 was considered secure, right?