go-http-auth icon indicating copy to clipboard operation
go-http-auth copied to clipboard

Support digest with SHA-256 and SHA-512/256 as per RFC 7616

Open spaskalev opened this issue 7 years ago • 3 comments

RFC 7616 defines a new algorithm header field and specifies SHA-256 and SHA-512/256 as valid options. It still supports MD5 for backwards compatibility, but explicitly recommends against it.

spaskalev avatar Sep 16 '17 14:09 spaskalev

Curious about this pull request and/or alternatives.

It seems like this particular PR includes SHA-256 and SHA-512/256, and uses standard libraries. But I can't tell if it's actually complete?

Is there any movement on this? Has anyone tested @spaskalev 's PR?

creeble avatar Mar 15 '22 23:03 creeble

IIRC it worked but it has been nearly five years since I used it :)

spaskalev avatar Mar 16 '22 08:03 spaskalev

fwiw, popular browsers now support it too, including chrome - https://bugs.chromium.org/p/chromium/issues/detail?id=1160478

rojer avatar Jan 24 '24 16:01 rojer