Search:

related article...

http://www.tgdaily.com/html_tmp/content-view-40806-108.html

I checked all my client certificates as well as the https sites I frequent. I didnt find any exposures.
I wonder...

I vaguely recall this exposure (MD5 collisions) publicized a few years ago. I guess someone finally implemented the theory. To mitigate the risk, you salt the key before encryption. Use a large salt...