Seeking feedback on default encryption algorithm for V4

Cantor, Scott cantor.2 at osu.edu
Fri Feb 21 11:50:07 EST 2020


On 2/21/20, 11:46 AM, "Michael A Grady" <mgrady at unicon.net> wrote:

> O365 metadata still indicates that SHA-1 signing is required. Don't even need an override for that, though, since they
> use the defined extension to indicate that.

That's both shocking (that they use the extension) and terrifying (that nobody is calling them out on this in 2020). I would imagine one could convince them similarly to add the CBC metadata if somebody asks.
 
-- Scott




More information about the dev mailing list