A better approach to security

[Christophe Meessen <christophe AT meessen.net>]

Hello,

I'm a bit confused by the explanation. Where is MD5 used ? Is it used as 
hash inside the signature or is it used by the PKI in a validity 
checking shortcut ?
If it is the former, it would be good to know which CA is using MD5 
signatures because this is indeed a big mistake.
If it is the later, it would also be good to know what PKI has this 
weakness. One needs to know if we are exposed and in what way.

It is regrettable the author uses false claims as the SSL is broken 
because this is confusing the reader.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature