Surely you missed <a href="https:&#x2F;&#x2F;eprint.iacr.org&#x2F;2015&#x2F;967.pdf" rel="nofollow">https:&#x2F;&#x2F;eprint.iacr.org&#x2F;2015&#x2F;967.pdf</a> , which prompted the CA&#x2F;Browser Forum not to delay the SHA1 sunset.