So all they have to do is switch to a proper hash function. Probably even MD5 would do. Other than that, their system is pretty clever, they are basically shif

So all they have to do is switch to a proper hash function. Probably even MD5 would do. Other than that, their system is pretty clever, they are basically shifting the server load of strong-HTTPs'ing everything to the client.