topic Registered
Verified 2026-09-19 · registry updated 2026-07-20

HTTP registry: hmac-sha256

HMAC using SHA-256

HTTP parameter values extend negotiation, framing, preferences, range handling, or other protocol components. The registry marks this value active; review compatibility before deploying it. hmac-sha256 is active in HTTP Signature Algorithms. Defining reference: RFC 9421, Section 3.3.3.

httpregistryhttp-message-signaturesignature-algorithms

Identifier (http)

hmac-sha256

HMAC using SHA-256

Interpret parameters only in the context that defines them; unknown parameters must not silently change security or framing behavior. The registry marks this value active; review compatibility before deploying it.

This registry value is currently marked active by IANA. Follow the defining specification before sending, accepting, or proxying it.

IANA registry: http-message-signature/signature-algorithms

Registry reference: RFC 9421, Section 3.3.3

Permalink: https://merginit.com/reference/http/registry/http-message-signature/signature-algorithms/hmac-sha256-81