Thank you so much for writing this, @tedu. As a web developer whose only real experience with hashes was for password hashing, I was having a really hard time understanding how the SHA-1 collision effected me. This clears things up a lot. :)