Saw the link to this on the CSCert mailing list this morning. It's interesting reading. http://www.win.tue.nl/hashclash/TargetCollidingCertificates/ Colin (Cside Remop)