We were getting questions from customers about the sha1 collision problems so I through together a blog post.
http://blogs.collab.net/subversion/subversion-sha1-collision-problem-statement-prevention-remediation-options If this project posts any official explanation or statements on Apache website, which we probably ought to do, I will edit my post to point to it. Thanks Mark

