#37078: Change default algorithm of salted_hmac() from SHA-1 to SHA-256
--------------------------------------+------------------------------------
     Reporter:  Denny Biasiolli       |                    Owner:  (none)
         Type:  Cleanup/optimization  |                   Status:  new
    Component:  Utilities             |                  Version:  dev
     Severity:  Normal                |               Resolution:
     Keywords:  security, crypto      |             Triage Stage:  Accepted
    Has patch:  0                     |      Needs documentation:  0
  Needs tests:  0                     |  Patch needs improvement:  0
Easy pickings:  0                     |                    UI/UX:  0
--------------------------------------+------------------------------------
Comment (by Jacob Walls):

 Sure thing, and thanks for the offer.

 1. Set yourself in the owner field here on this ticket.
 2. Check the [https://docs.djangoproject.com/en/dev/internals/contributing
 /writing-code/submitting-patches/#deprecating-a-feature deprecation guide]
 for places to add documentation.
 3. I assume you will need to do something like change the default value
 for the argument to a `NOT_PROVIDED` sentinel, check for it, and issue the
 warning and fall back to SHA-1.
-- 
Ticket URL: <https://code.djangoproject.com/ticket/37078#comment:7>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/django-updates/0107019ddece729a-2e54b9d6-ebc7-46aa-bbce-ee063ef68922-000000%40eu-central-1.amazonses.com.

Reply via email to