A SHA-1 collision was found so we should change the default for the next release (9.12 as it is too late for 9.11 and there is no emergency).