New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Favor stronger digest algos in Rails config #77

Open

eliotsykes opened this issue Mar 2, 2021 · 0 comments

Owner

eliotsykes commented Mar 2, 2021

Favor stronger digest algorithms where they are configurable in Rails.

SHA256 is stronger than SHA1
SHA1 is stronger than MD5

There are differently named config options depending on your Rails version and setup, some of which are:

config.active_support.key_generator_hash_digest_class = ...
config.active_support.hash_digest_class = ...
ActiveSupport::Digest.hash_digest_class = ...

config.active_support.use_sha1_digests = ... # deprecated in Rails 7.0.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment