Nice write-up, but it&#x27;s slightly misleading or confusing to not explain that Nat McHugh&#x27;s image collisions were chosen-prefix attacks. The post makes it sound like the images were the product of some unexplained collision, and then goes on to explain how chosen prefix can be used to forge certificates.