topic Deprecated
Verified 2026-09-19 · registry updated 2024-05-22

HTTP registry: sha

The SHA-1 algorithm. It is vulnerable to collision attacks; seeand

Integrity registry values define algorithms or message metadata used to detect alteration of HTTP content or representations. The registry marks this value deprecated; review compatibility before deploying it. sha is deprecated in Hash Algorithms for HTTP Digest Fields. Defining reference: rfc3174.

httpregistryhttp-digest-hash-algdigest-fields

Identifier (http)

sha

The SHA-1 algorithm. It is vulnerable to collision attacks; seeand

Prefer approved algorithms, define exactly which bytes are covered, and account for encoding, ranges, canonicalization, and replay. The registry marks this value deprecated; review compatibility before deploying it.

This registry value is currently marked deprecated by IANA. Follow the defining specification before sending, accepting, or proxying it.

IANA registry: http-digest-hash-alg/digest-fields

Registry reference: rfc3174

Permalink: https://merginit.com/reference/http/registry/http-digest-hash-alg/digest-fields/sha-74