What is the process for verifying the hash function that was used to create a web applications certificate? I ask because there apparently has been some issue with the MD5 hash function wherein someone malicious can fake a certificate.
Firefox 3 has all MD5 encryption disabled by default except for RC4/128 (filter
about:config by md5)
Lots more info here: The new MD5/SSL exploit is NOT the end of civilization as we know it