Why is HMAC-SHA1 still considered secure? (2015) | Hacker News Reader