It's relatively easy to make collisions with MD5, and attacks like it have been documented against SSL certificates. Something like sha256 would probably be mor

It's relatively easy to make collisions with MD5, and attacks like it have been documented against SSL certificates. Something like sha256 would probably be more appropriate.