FusionAuth / fusionauth-issues

FusionAuth issue submission project
https://fusionauth.io
90 stars 12 forks source link

Gravatar URLs are md5 instead of sha256 #2856

Open theogravity opened 1 month ago

theogravity commented 1 month ago

Gravatar recommends sha256 instead of md5

It seems the rationale is that it's possible to reverse-engineer the e-mail address from the md5 hash.

https://github.com/Automattic/wp-calypso/issues/87886

Description

I think FA is using md5 instead of sha256.

At some point, gravatar started recommending sha256, as their docs say to use it:

https://docs.gravatar.com/api/avatars/hash/

mooreds commented 1 week ago

Thanks for the enhancement suggestion, @theogravity ! We have a backlog of work, but when we review the admin UI, we'll see if we can get this work fitted in.