Mark,

On 11/18/23 07:52, Mark Thomas wrote:
On 17/11/2023 19:36, Christopher Schultz wrote:

Is there any reason why SHA-256 is the default? MD5 is the historical default / only implementation for HTTP DIGEST.

RFC 7616 (2015)

Chrome will choose SHA-256 if presented with a choice of SHA-256 and MD5.

Yeah, but doesn't it advertise that in the HTTP request headers?

-chris

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to