Comment 36 for bug 312536

 I agree with Sean McNamara on this one. Implementing a fix for this other that the suggested Firefox equivalent would be a rash move that would disable far to many valid services based on a hand crafted attack that required considerable expertise and hardware.

Until a move is made to the SHA family of hashes by the certifying authorities there is no practical way to resolve this issue.