Just to reiterate from a post I made later. There's a (very, very, very...) few places where SHA1 is not broken. But there's no reason ever to use it for new ...