download verification with md5?

[inter.service.intelligence]

hey,
I was thinking about installing dragonflybsd but the download page doesn't show any hashes except md5, which is a joke at this point. Quote "cryptographically broken and unsuitable for further use"

Is that the approach to security at dragonflybsd? a md5 approach?

furthermore: there is no https on the http://lists.dragonflybsd.org/ and it handles sensitive information like an email.


Really not encouraging for security minded users like me.

Greets