MD5 hasn't been considered secure for years - at least for developing new protocols in the IETF. All hashes eventually become insecure (with increasing compute speed). This is why it is critical to have easy mechanisms for changing algorithms & identifying them.