Comment by singpolyma3

signatures are basically always computed over hashes. The only problem here is that the hashes are not secure. And this is being fixed.