On Thu, 8 Oct 2015, Taylor R Campbell wrote:
In the long run, I don't think we gain anything by continuing to use SHA-1, but we ought to wait until ~everything has SHA-512 hashes before we stop verifying the SHA-1 hashes -- otherwise it would expose us to any problems in RMD160, which gets relatively little public scrutiny.
FWIW, https://sites.google.com/site/itstheshappening/ describes SHA-1 collisions starting to get easier. Better to start phasing out SHA-1 sooner than later. - Hubert