In addition to what sister comments said, it&#x27;s also a matter of your threat model. While SHA-1 might no longer be sufficient protection against targeted attacks by powerful attackers, it&#x27;s still good enough to protect against a random person snooping on another random person on an open WiFi network.