Remember how experts have been saying, "Drop SHA-1" for years and years? Now they're saying, "Told you so."