On Tue, 2004-02-10 at 17:27, Daniel Roethlisberger wrote:
Hallam-Baker, Phillip <pbaker(_at_)verisign(_dot_)com> [2004-02-10/16:23]:
Use SHA-1
[...]
I am not sure exactly what you are replying to. It would help if you'd
place your reply directly below the appropriately quoted text.
Are you proposing to use SHA-1 in the HMAC for generating the SRS
cookie, instead of MD5?
SHA is bound to be larger? (6 bytes per hash?) Is there sufficient
reason to not go with base64 encoded MD5 hash? Given our issues with
the local-part 64 char limit, base64 encoded MD5 hashes seen to make the
most sense.
Cheers,
James
--
James Couzens,
Programmer
Current projects:
http://libspf.org