In reply to Erik Geurts.

In addition what people have already said, it can also lead to unwanted identity disclosure (MD5 can easily be brute-forced today, and the hash could link pseudonymous comments across sites, even when you don't have a Gravatar account).