https://www.securityprivacyrisk.com/fatally-weak-md5-function-torpedoes-crypto-protections-in-https-and-ipsec-ars-technica/