SHA-1 chosen prefix collisions and DNSSEC
blog.apnic.net