topic
Verified 2026-09-18

HTTP Content Digests

Digest fields let senders and recipients verify bytes or representations in an HTTP exchange.

Use Content-Digest for the message content and Repr-Digest for the selected representation. Account for content encoding and range responses when choosing which digest applies.

httpsecurityintegritycontent

Reference (http)

Content-Digest: sha-256=:47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZc3g=:

Use Content-Digest for the message content and Repr-Digest for the selected representation. Account for content encoding and range responses when choosing which digest applies.

Common mistakes

  • Comparing a digest computed over different bytes because one side included compression or a range transformation.

Sources

Permalink: https://merginit.com/reference/http/http-digests