I hear you regarding infeasibility, though right now there's another article about content hash collisions being used to distribute a tampered-with Mint Linux image (MD5 collisions).
It's "easier" to get the computational resources to fabricate a collision there, of course, but who is to say how much compute power state level adversaries bring to bear?
It's "easier" to get the computational resources to fabricate a collision there, of course, but who is to say how much compute power state level adversaries bring to bear?