Perhaps a tracker. While there's no real "security" problem to be dealt with here, general insecurity/deprecation of MD5 may pose problems in the future. In the end, BLAKE2 should be faster (and probably more portable, given we've dropped support for old Python versions) anyway, so…