SHA-1 has been broken. It is advisable to use a longer digest as implemented in Digest::SHA (for example SHA-512). I think it would be a good idea to mention that in the docs.
Sat May 23 07:09:13 2009GAAS [...] cpan.org - Correspondence added
It's mentioned now :)
Sat May 23 07:09:13 2009The RT System itself - Status changed from 'new' to 'open'
Sat May 23 07:09:14 2009GAAS [...] cpan.org - Status changed from 'open' to 'resolved'