From: Darryl Green (darryl.green_at_[hidden])
Date: 2024-12-09 22:55:39
On Mon, 9 Dec 2024, 11:54 pm Peter Dimov via Boost, <boost_at_[hidden]>
wrote:
> Amusingly enough, I'm _right now_ looking at an API documentation
> which requires HMAC-SHA1. :-)
Amusingly enough there isn't a problem with using HMAC-SHA1 if the key is
being used as a secret, is predictable etc. This should make its use in
message authentication perfectly ok if the conditions for effective
authentication through use of HMAC are actually met in the system in
question.