Update this comment. We talked about using CRC32 on the devel list last week and decided that we want to stick with SHA1. * We might want to move to something more secure in the future * It would be nice if we could give client's the ability to specify the hash function that gets used