rack-devel archive mirror (unofficial) https://groups.google.com/group/rack-devel
 help / color / mirror / Atom feed
* rack-contrib: add SHA-1 and SHA-2 to ETag
@ 2010-02-06  1:11 Gaius
  2010-02-08 18:36 ` Ryan Tomayko
  0 siblings, 1 reply; 2+ messages in thread
From: Gaius @ 2010-02-06  1:11 UTC (permalink / raw)
  To: Rack Development

I added support for SHA-1 and SHA-2 (-256, -384, and -512) digest
algorithms to ETag. The relevant commit is here:
http://github.com/jamesarosen/rack-contrib/commit/5f2aa98e5e3898b0e60f3adc4304330f1fa04e69

I admit that the primary benefit of SHA-2 (better resistance to pre-
and post-image attacks), is not terribly important in the context of
an ETag. Still, I prefer to avoid outdated hash functions where
possible.

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: rack-contrib: add SHA-1 and SHA-2 to ETag
  2010-02-06  1:11 rack-contrib: add SHA-1 and SHA-2 to ETag Gaius
@ 2010-02-08 18:36 ` Ryan Tomayko
  0 siblings, 0 replies; 2+ messages in thread
From: Ryan Tomayko @ 2010-02-08 18:36 UTC (permalink / raw)
  To: rack-devel

On Fri, Feb 5, 2010 at 5:11 PM, Gaius <james.a.rosen@gmail.com> wrote:
> I added support for SHA-1 and SHA-2 (-256, -384, and -512) digest
> algorithms to ETag. The relevant commit is here:
> http://github.com/jamesarosen/rack-contrib/commit/5f2aa98e5e3898b0e60f3adc4304330f1fa04e69
>
> I admit that the primary benefit of SHA-2 (better resistance to pre-
> and post-image attacks), is not terribly important in the context of
> an ETag. Still, I prefer to avoid outdated hash functions where
> possible.

Applied in rack-contrib. I believe ETag was taken in rack core, so we
may need to figure that out.

Thanks,
Ryan

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2010-02-08 18:36 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2010-02-06  1:11 rack-contrib: add SHA-1 and SHA-2 to ETag Gaius
2010-02-08 18:36 ` Ryan Tomayko

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).