Just for the records: I noticed a salt generation weakness in htpasswd when using it in MD5 mode and
reported it to the Apache developers.
Update: nobody replied to my email, so I went to the Apache website where found out that you now need to submit patches via their BTS.
gna Well, I
did that too.