search

ioggstream / draft-polli-resource-digests-http

THIS REPO WAS MOVED TO https://github.com/httpwg/http-extensions/
https://httpwg.org/http-extensions/draft-ietf-httpbis-digest-headers.html
Other
0 stars 1 forks source link

DISCOURAGES is not an RFC2119 keyword #8

Closed LPardue closed 5 years ago

LPardue commented 5 years ago

This RFC DISCOURAGES the use of MD5 algorithm for security reasons.

DISCOURAGES is not a 2119 keyword and therefore has little normative affect.

Suggestion would be to replace the sentence with:

"The use of the MD5 algorithm is NOT RECOMMENDED for security reasons."

However, this just a stop gap because for "security reasons" is not qualified with discussion or citation. The final document will need to address this but I think we can live with things for the time being.

ioggstream commented 5 years ago

Thanks for the hint. We can create an issue for the MD5 story.

ioggstream commented 5 years ago

fixed in 53f3dc8