SHA1 weaknesses...

[Joseph Galbraith <galb-list%vandyke.com@localhost>]

I kind of hate to do this, but...

In light of recent SHA1 weaknesses, which, if I understand
correctly, may not really effect SSH, but are still worrisome,
should we be looking at introducing a document for using
SHA256?

Or are the vulnerabilities too remote, and so much
not an issue for our SSH usage, that we don't need
to do anything in response?

Thanks,

Joseph, the non-cryptographer