https://arstechnica.com/security/2017/02/watershed- sha1-collision-just-broke-the- webkit-repository-others-may- follow/ https://shattered.io/static/shattered.pdf Venti is similarly corruptible, right? Since the checksum is over just the content. If you downloaded https://shattered.io/static/shattered-1.pdf andhttps://shattered.io/static/ , venti would lose the contents of one.shattered-2.pdf